Suppose I had two Cisco switches each outputting some network traffic to a SPAN port, and I needed to send the sum of all that traffic to a third device for monitoring that traffic via libpcap. The easiest way to accomplish this would be to have two NIC's in the target device and send one SPAN port to each, but suppose the target device only contained a single NIC and was not expandable.
Obviously I can't route the SPAN traffic through a switch or router since the switch won't passively send all the traffic to my monitoring device disregarding MAC, IP, ARP, etc. However, thats exactly what an old school "Passive" Hub would do.
Will two SPAN ports "play nice" outputting to a single hub or will they "talk over" each other and ignore resource contention,etc. I know a SPAN port operating as a normal ethernet device in that it can't receive any traffic, respond to ARP requests, etc, but does it keep enough of the Ethernet smarts to coexist with other transmitters on the same circuit, or would it need to be the only transmitter on the wire?
SPAN ports on a switch will only send traffic out - they will drop any inbound traffic. Try this out in a lab environment.
Have a look at RSPAN - http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/span.pdf - which may help you by trunking your SPANned traffic across to another switch and down a single SPANned port.