Encapsulated Remote Switch Port ANalyzer (ERSPAN) is protocol implemented by Cisco hardware allowing to mirror traffic from a switch to an another machine for analysis. Traffic is encapsulated in ERSPAN on top of GRE (Generic Routing Encapsualtion).