Filtering link aggregation taps provide fast and flexible line-rate data access on critical network paths, even when switched across a meshed architecture. These taps offer line-rate, port-level filtering for full duplex and multi-link traffic analysis. Replication of network traffic and conditions support simultaneous access for a diverse collection of network monitoring, security and application performance solutions commonly found on critical links. Analysis equipment performance improves since the taps employ hardware based filtering, which only forwards traffic and events of concern, and eliminates the possibility of oversubscription from full duplex links. Filtering criteria can be based on network port numbers, addresses, broadcast/multicast/unicast traffic.