Which technology is the most effective choice for locally mirroring ports to support data investigation for a single device at the data layer?

Which technology is the most effective choice for locally mirroring ports to support data
investigation for a single device at the data layer?

A.
RMON

B.
SPAN