I was very disappointed in this switch because, unlike the earlier 1800 which I own, you are locked out of the destination port when mirroring ports. This means you cannot use a Linux box with a single NIC and tcpdump to do real time port monitoring.