Abstract: An arrangement in a network device for monitoring network traffic is provided. The arrangement includes a set of network ports, which includes a set of input network ports for receiving the network traffic and a set of output network ports for outputting the network traffic from the network device. The arrangement also includes a switch chip, wherein the switch chip is configured at least for analyzing the network traffic. The arrangement further includes a set of monitoring ports, which is configured to receive the network traffic from the set of network ports. The arrangement yet also includes a tap module, which is configured at least for intercepting at least part of the network traffic flowing through the network device and forwarding at least part of the network traffic to at least one of the set of monitoring ports.