Product Type

Ditto Shark

Ditto Shark


Network data capture device


Stand-alone network capture device; captures network traffic, internet activity, VOIP, etc.


Product name Ditto Shark
Host (I/O) Ports (2) eSATA ports for attaching bare SATA drives or eSATA mass storage products
(3) RJ45 Gigabit (1000Base-T) Ethernet — one upstream, one downstream, one GUI access
Drive Types Supported SATA 2.5″ drives
Bay Type (1) DataPort DP20 removable drive carrier
Insertion Rating Up to 50,000 DP20 carrier insertions
Number of LEDs 2
LEDs on each bay Power & activity on DP20
LCD Screen Four-line backlit LCD controlled with four soft-touch menu navigation buttons.
LCD Info 4 lines x 20 characters width
LCD Backlight Yes (backlighting can be disabled using stealth switch)
Stealth Mode Disables all light output (LEDs/LCD); LCD readable with night-vision goggles
Navigation menu LCD/button driven menu system
Web admin interface Operable from a web browser
Construction material(s) Galvanized sheet metal chassis
Dimensions 9.02″ x 5.63″ x 1.61″ (229mm x 143mm x 41mm)
Weight 2.92 lbs. (1.32 kg)
Compliancy FCC, CE, RoHS
Warranty CRU provides a 3-year limited warranty for this product.
Technical Support Your investment in CRU products is backed up by our free technical support for the lifetime of the product. If you need to contact us for any reason, visit or call us at 1-800-260-9800 or +1-360-816-1800.

About Ditto Shark


Free Updates

Store captured network traffic


Sniff data on a network and store captured packets on the Ditto Shark’s on-board removable drive or to your own external drive.


Reliable network data capture


Ditto Shark reliably and consistently captures short burst 1 Gbps traffic and sustained 100 Mbps traffic.


Hardware-based and portable


Take Ditto Shark with you to use on any network you have authorization to analyze—all without installing software.


Analyze network data in realtime


Ditto Shark is compatible with Wireshark to let you see and analyze all available network traffic as it’s sent to the port that Ditto Shark is connected to.


Capture Filters


Ditto Shark uses Wireshark compatible capture filters and you can create your own.


Remote operation


The easy-to-use Ditto web browser graphical interface supports remote operation via network or VPN, providing access to Ditto configuration, user administration and user rights, as well as direct operation of all Ditto Shark functions and features.


Stealth Mode Activated


With its stealth mode that deactivates lights and alerts, Ditto Shark can be used in covert operations.


Free feature updates


Make sure you have the most current features by downloading the latest Ditto firmware.

  • Captures internet traffic with virtually no packet loss
  • Captures short burst gigabit network traffic
  • Captures sustained 100 Mbps network traffic
  • Removable drive carrier for storing captured data