MS as a traffic Sensor

[k-oppata]

I'd like to analyze our traffic with MS switch, though no traffic disruption is allowed to swap our switch to MS.

So I think, if our switch mirrors(SPAN) traffics to a new MS, I could analyze those traffics on the Dashboard.

Question is, MS can recognize those mirrored packet as same as usual traffic?

Thanks in advance.

[GIdenJoe]

Your existing switch will just spew the frames out it's mirror port and those frames will be received by the MS switch.  So if you want to receive those frames you will also have to set a mirror port on the MS switch and connect your analyser on that port.

[k-oppata]

Thank you, GldnJoe.

My intension is to analyze traffic not by an analyzer, but by MS itself.

[GIdenJoe]

It's a switch, not a network analyser 😉  You need a host to the capturing.
Agreed there are cloud captures now but these are short in duration.

Continuous captures always require mirroring to a device dedicated for the capture.

[cmr]

If the traffic is all being sent to the MS switch, then in theory it should start analysing it and you should get an idea of what it would look like if used as the main switch, although obviously you'll just see it all on one port as a big lump...

[k-oppata]

Thank you, cmr.

Is it unnecessary that MS forwards the traffics to another port?

To say, just receiving the traffic is enough to analyze it?