WiebeTech Ditto Network Tap Module Gigabit Capture for Ditto DX

A plug-on expansion module that turns a WiebeTech Ditto or Ditto DX Forensic FieldStation into an inline gigabit network tap. It sits between a target computer and its network, passes traffic through and records it as PCAP files to a destination drive on the Ditto, or streams it live to Wireshark. It has no power supply of its own - it runs from the host Ditto.

FoneFunShop supplies the CRU WiebeTech forensic range to UK police forces, digital forensic labs, investigators and eDiscovery teams. This item is ordered in from CRU on request, so please contact us for the current lead time, or for a formal quotation if you need one to raise a purchase order. We are happy to answer compatibility questions before you buy.

Compatible with: WiebeTech Ditto Forensic FieldStation, WiebeTech Ditto DX Forensic FieldStation

Key Features:

• Adds network traffic capture to Ditto and Ditto DX Forensic FieldStations
• Two RJ45 gigabit (1000BASE-T) ports - one to the network, one to the target computer; ports are direction-agnostic
• Captures internet, general network and VOIP traffic
• Saves captures as tcpdump/Wireshark-compatible PCAP files on the Ditto destination drive, with optional MD5/SHA-1 hash file
• Optional live capture stream (rpcap) to a remote Wireshark analyser
• Capture filters by port, set up in the Ditto browser interface or front panel
• Fail-safe design keeps passing network traffic if power is lost
• Sustained 10/100 Mbps capture plus short-burst gigabit capture
• USB 2.0 port for USB storage, keyboard or Wi-Fi adapter, plus USB 2.0 pass-through on the back
• Powered by the host Ditto - no separate PSU

Specifications:

• Manufacturer part number: 31030-1577-0000
• UPC: 810873019531
• Interfaces: 2x RJ45 1000BASE-T Gigabit Ethernet (up to 1 Gbps); 1x USB 2.0 (up to 480 Mbps); Ditto expansion-module connector; USB 2.0 pass-through
• Capture: PCAP file capture and/or live rpcap stream to Wireshark; sustained 10/100 Mbps, burst 1 Gbps (packet loss depends on traffic)
• Supported media: External USB HDDs, SSDs and media card readers (as capture destination via USB 2.0)
• Power: Powered by host Ditto / Ditto DX (bus powered)
• Host compatibility: Ditto Forensic FieldStation, Ditto DX Forensic FieldStation
• Construction: All-metal enclosure
• Operating humidity: 5% to 95% non-condensing
• Compliance: FCC Part 15 Class A, CE (EN55024, EN55032), RoHS; TAA compliant (per CDSG)
• Software: Configured via Ditto browser interface or Ditto front panel; output readable in Wireshark/tcpdump
• Country of origin: Taiwan
• Warranty: 3-year limited manufacturer warranty (CRU/CDSG)

Package Contents:

• Ditto Network Tap Module x1
• RJ45 Ethernet cable x2
• User manual x1

Some photos show other WiebeTech equipment for reference. Only the items listed under Package Contents are included.