The SharkTapBYP adds the extra security of a fail-safe link.
- The combination of carbon copy technology, compact size,
low power, and power-fail bypass make the SharkTapBYP ideal for permanent and embedded applications.
The same features as the SharkTapUSB, with the addition of power-fail bypass
If the SharkTap loses power, relays make a physical bypass between 'NETWORK' ports
Single power + TAP connection for embedded applications
Connect several SharkTaps to a USB hub for datacenter applications.
'Carbon copy' repeater technology
Directly supports 10Base-T, 100Base-T, and 1000Base-T links
Protocol independent - copies anything, even if it's not proper IP data.
'read only' (no way to send data from TAP port to Network ports)
Small and constant delay (about 500nS) - suitable for industrial time protocols
Full 2Gbit full-duplex bandwidth on NETWORK link.
Even replicates errors (it can't replicate the exact analog fault, but the fact of a data error is replicated)
<- SharkTap internals shown next to Raspberry Pi, for reference
The bypass relays do not draw idle power, and do not break PoE on power-up or power-fail
Dual power for further security: Power from a USB3 port (blue insert) and/or a 'wall wart' with type A connector (like a phone charger).
A USB2 port is adequate if you're only using the wired-TAP port or sniffing 10/100 traffic. USB3 cable included.
Suitable for bench use as well - simple plug and play, non-conductive plastic case
You'll need a CAT-5 (or better) patch cord or two (not included)
A "LAN7801 USB3.0 to Ethernet adapter" will appear as a device on your Windows PC. Configure it just like a built-in network card. There is also standard support under Linux. Until Microchip updates their driver, you must assume the SharkTap will NOT work with recent MacOS versions.
Plug and play with recent Windows or Linux versions. Driver either included or will install automatically (on Windows).
SharkTapBYP 10/100/1G Specifications
Directly supports 10Base-T, 100Base-T and 1000Base-T links
Dimensions (including tabs): 2.9"W x 5.1"L x 1.10"H, 5.4 oz
Passes Power Over Ethernet (PoE), 350mA per pair (at 57V)
Draws approximately 200-400mA, depending on link speeds
Inrush current exceeds USB spec, because of relays. It's typically fine with a USB 3 port or hub.
Temperature range: 0 to 70 Celcius. Nominal range - not formally guaranteed.
Warranty: 30 day return, 1 year defects in parts and workmanship
Yes, the SharkTap will 'aggregate' packets from the two NETWORK ports and mirror (i.e. duplicate) them on the tap port. If two packets are received at the same time they will be duplicated sequentially on the tap port. The SharkTap has a 64KB buffer to absorb bursts of full duplex traffic.
Does the SharkTap respond to flow control packets?
No, the SharkTap doesn't respond to any packets, it only passes them through. Flow control, or VLAN packets, or any
other special purpose packets that might be intercepted by a smart switch, are simply passed through and mirrored to the tap port.
Will the SharkTap "fail open"?
NO - If the SharkTapBYP model loses power, relays switch in a hard bypass, restoring the Network link.
Does the SharkTap support Power over Ethernet?
Yes, it does. The center tap of of the isolation transformers for each pair are connected to the corresponding center tap of the other NETWORK port. So the high speed data is blocked, but DC power is passed through. This is done for all four pairs, so all standard PoE techniques are supported. There are no settings, it just works.
Will the SharkTap show packets with bad FCS?
Yes. The SharkTap copies everything to the Wired TAP port. But note, not all NIC cards will accept bad packets, and/or you may have
to configure your NIC for this. On linux it's generally the rx-all option in ethtool.
The USB hardware accepts bad FCS, but neither the standard Windows or Linux driver configure it that way. We can give you guidance on recompiling
the linux driver to support bad packets. We don't directly support this effort, but we can tell you how to do it. It's not a big change, if you
know how to recompile the kernel.
Can the SharkTap drop packets?
Yes, but only on the TAP port. The SharkTap has fairly large data buffering, but if the sustained, combined data rate of send + receive data is greater than 1000Mbps, the SharkTap will not be able to duplicate all packets to the TAP port, so some packets can be dropped. This is not common in real world connections, but it can happen.
Is the SharkTap a hub?
No. The most important distinction is that the SharkTap will not pass packets from
the TAP port to the Network ports. So you cannot access the network you are monitoring, from the monitoring PC.
