Hello dear Imperva community.
We try to move from agent's traffic to SPAN.
But we have some trouble, where we give SPAN traffic on GW SPAN Interface (sniffing mode), we do not see it in the system (but we see from GW tcpdump).
We think this is because we receive ERSPAN, so question and maybe someone have a idea, how we can fix this?
#DatabaseActivityMonitoring------------------------------
Sergey Malovidchenko
Lead Engineer
Moscow
------------------------------