mixture:
Absolutely no issue with having a SPAN/mirror port collect traffic.
The issue is the sheer volume - keeping 90 days worth of traffic in our office in the UK would mean terabytes of storage to be managed. We've not got enough room for all the disks. The only winners are the storage vendors
