Thu Nov 03, 2022 7:50 pm
@raminmalek,
normally, SPAN means that you obtain a copy of particular actual traffic (passing through a particular port or group of ports, or within a VLAN). In Mikrotik, this is usually called traffic mirroring. What you describe (bridging EoIP tunnel and Ethernet interface together) doesn't seem to be related to traffic mirroring, except if you have a mirror destination Ethernet port on some equipment, and you connect the Ethernet port bridged with the EoIP tunnel to that port using a patchcord. So first of all, provide a diagram showing the device(s) involved, the flow of the actual traffic, and the expected flow of the mirrored traffic. Also the other end of the EoIP tunnel needs to be shown on the diagram, especially if it is a CHR.