Ditto Shark

Ditto Shark is a forensic device for network data capture and analysis. Ditto Shark can sniff data on a network – including VOIP – and store it on an internal removable drive. The standalone device captures short burst 1 Gbit traffic and sustained 100 Mbps traffic.

Captures internet traffic with virtually no packet loss

Captures short burst gigabit network traffic

Captures sustained 100 Mbps network traffic

Removable drive carrier for storing captured data

Features

• Standalone product—operates without a PC or a Ditto Forensic FieldStation

• Captures Internet and VOIP traffi c with virtually no packet loss*

• Captures sustained 10/100 Mbps network traffi c and short burst gigabit network traffi c*

• Filter and capture network traffi c to a tcpdump/Wireshark-compatible PCAP fi le

• Optional live capture stream (rpcap) interface for Wireshark

• Removable drive carrier for data storage

• Fail-safe design continues passing through network traffi c if power is lost

• Free firmware updates for registered users

Technical Specs

Product name	Ditto Shark
Host (I/O) Ports	(2) eSATA ports for attaching bare SATA drives or eSATA mass storage products (3) RJ45 Gigabit (1000Base-T) Ethernet -- one upstream, one downstream, one GUI access
Drive Types Supported	SATA 2.5" drives
Bay Type	(1) DataPort DP20 removable drive carrier
Insertion Rating	Up to 50,000 DP20 carrier insertions
Number of LEDs	2
LEDs on each bay	Power & activity on DP20
LCD Screen	Four-line backlit LCD controlled with four soft-touch menu navigation buttons.
LCD Info	4 lines x 20 characters width
LCD Backlight	Yes (backlighting can be disabled using stealth switch)
Stealth Mode	Disables all light output (LEDs/LCD); LCD readable with night-vision goggles
Navigation menu	LCD/button driven menu system
Web admin interface	Operable from a web browser
Construction material(s)	Galvanized sheet metal chassis
Dimensions	9.02" x 5.63" x 1.61" (229mm x 143mm x 41mm)
Weight	2.92 lbs. (1.32 kg)
Compliancy	FCC, CE, RoHS