A way of monitoring network traffic that forwards a copy of each packet from one network switch port to another. The technique enables administrators to track switch performance via a protocol analyzer on the port that receives the mirrored data. The analyzer captures and evaluates the data without affecting the client on the original port. Port mirroring can be used for diagnostics, debugging, or defense.