ProfiTap PROFISHARK 100M User manual

ProfiShark 100M
ProfiShark 1G
ProfiShark 1G+
ProfiShark 10G
ProfiShark 10G+
USER MANUAL

If you have any questions, visit our Knowledge Base:
https://kb.profitap.com/
You can also contact us through our website:
https://www.profitap.com/contact-us/
Or directly by email:
[email protected]
For the latest documentation and software, visit our Resource Center:
https://resources.profitap.com/
2

TABLE OF CONTENTS
1. Overview 5
1.1. Hardware Overview 5
1.2. Package Contents 6
1.2.1. ProfiShark 100M 6
1.2.2. ProfiShark 1G 6
1.2.3. ProfiShark 1G+ 6
1.2.4. ProfiShark 10G 6
1.2.5. ProfiShark 10G+ 6
1.3. Specifications 7
1.4. Advanced Timestamping 8
1.5. Interfaces & LED Behavior 9
1.5.1. ProfiShark 100M Interface 9
1.5.2. ProfiShark 100M LED Behavior 10
1.5.3. ProfiShark 1G Interface 11
1.5.4. ProfiShark 1G LED Behavior 12
1.5.5. ProfiShark 1G+ Interface 13
1.5.6. ProfiShark 1G+ LED Behavior 14
1.5.7. ProfiShark 10G Interface 15
1.5.8. ProfiShark 10G LED Behavior 16
1.5.9. ProfiShark 10G+ Interface 17
1.5.10. ProfiShark 10G+ LED Behavior 18
2. Getting Started 19
2.1. ProfiShark Software Setup 19
2.1.1. Windows 19
2.1.2. Linux 19
2.1.3. macOS 20
2.1.4. Synology NAS 24
2.1.5. ESXi 25
2.2. Analysis Software 26
2.2.1. Analyzer 26
2.2.2. Wireshark Extcap Tool 26
2.2.3. Wireshark Dissector 26
2.3. Hardware Setup 28
3. Capture Guide 29
3.1. ProfiShark Manager 29
3.1.1. Counters Tab 29
3.1.2. Charts Tab 32
3.1.3. SFP Tab 33
3.1.4. Traffic Logs Tab 34
3.1.5. Network Ports Tab 35
3.1.6. Filters Tab 37
3.1.7. Timing Tab 38
3

3.1.8. Features Tab 40
Status 40
Firmware Update 40
Capture Format 41
Firmware Selection 42
3.1.9. Capture Tab 43
3.1.10. Capture Control 44
3.2. Live Capture 45
3.2.1. Live Capture with Wireshark Extcap Tool 45
3.2.2. Live Capture with Wireshark Dissector 45
3.3. Long-Term Capture 45
Legal 47
Disclaimer 47
Copyright 47
Trademarks 47
4

1. Overview
1.1. Hardware Overview
ProfiShark is a portable network traffic capture platform that provides quick packet-level insight anywhere it
is deployed. ProfiShark is designed for high performance and accuracy, delivering high-fidelity traffic
capture regardless of packet rate, high-precision hardware timestamping, and aggregation to a USB output,
while leaving the original network traffic unaltered.
ProfiShark 100M features a fully-passive in-line design, with the network link galvanically separated from
the traffic capture system, making it inherently fail-safe and having the same effect on the network link as a
patch cable.
ProfiShark 1G provides in-line and out-of-band capture of 10M/100M/1G traffic. It manages full-duplex
gigabit traffic capture at wirespeed, which it aggregates and outputs to a USB 3.0 port. It surpasses all
standard NICs in capture mode, as it catches any tags and encapsulation without altering the frames. When
the TAP becomes unpowered, it activates its bypass circuits, connecting the two attached devices directly.
ProfiShark 1G integrates a high-performance fast failover circuit and a proprietary algorithm, reducing the
unavailability of the network path down to approximately 1-2 seconds. A dedicated power adapter can be
used to prevent failover when disconnecting the USB 3.0 port. ProfiShark 1G also features Link Failure
Propagation: if one of the network devices is disconnected, the TAP disconnects the line to the other
attached device, allowing a redundant path to be activated in the network route node.
ProfiShark 10G features two SFP+ cages, for visibility into 1G and 10G, copper and fiber connections,
capturing network traffic in-line or out-of-band. It integrates hardware filters, deep packet inspection and
packet slicing for optimizing captured traffic throughput, so as not to oversubscribe the USB 3.0 output (3.2
Gbps).
ProfiShark 1G+ and ProfiShark 10G+ provide the same features as their respective base models, with the
addition of advanced timestamping capabilities, combining hardware (GPS/GLONASS, PPS) and software
features for greater control over timestamp synchronization (see 1.4. Advanced Timestamping).
5

1.2. Package Contents
Note: Please contact the supplier if any part is missing or damaged.
1.2.1. ProfiShark 100M
● ProfiShark 100M main unit
● Transport pouch
● Ethernet cat6a cable (2 m)
● USB 3.0 cable (1.8 m)
● USB key (software, drivers, documentation)
● Quick Start Guide
1.2.2. ProfiShark 1G
● ProfiShark 1G main unit
● Transport pouch
● Ethernet cat6a cable (2 m)
● USB 3.0 cable (1.8 m)
● USB key (software, drivers, documentation)
● Quick Start Guide
1.2.3. ProfiShark 1G+
● ProfiShark 1G+ main unit
● GPS/GLONASS antenna
● Ethernet cat6a cable (2 m)
● USB 3.0 cable (1.8 m)
● USB key (software, drivers, documentation)
● Quick Start Guide
1.2.4. ProfiShark 10G
● ProfiShark 10G main unit
● USB 3.0 cable (1.8 m)
● 1.5 m USB A male to DC 5V cable
● USB key (software, drivers, documentation)
● Quick Start Guide
1.2.5. ProfiShark 10G+
● ProfiShark 10G+ main unit
● GPS/GLONASS Antenna
● USB 3.0 cable (1.8 m)
● 1.5 m USB A male to DC 5V cable
● USB key (software, drivers, documentation)
● Quick Start Guide
6

1.3. Specifications
ProfiShark 100M
ProfiShark 1G
ProfiShark 1G+
ProfiShark 10G
ProfiShark 10G+
Capture Interface
2 x RJ45 Ethernet
10/100M
2 x RJ45 Ethernet
10/100/1000M
2 x RJ45 Ethernet
10/100/1000M
2 x SFP+ Ethernet
1/10G
2 x SFP+ Ethernet
1/10G
Capture Output,
Management Interface,
Powering
1 x USB 3.0
1 x USB 3.0
1 x USB 3.0
1 x USB 3.0
1 x USB 3.0
Optional Power
1 x 5V/1.5A DC input
(center positive)
1 x 5V/1.5A DC input
(center positive)
1 x 5V/1.5A DC input
(center positive)
1 x 5V/1.5A DC input
(center positive)
1 x 5V/1.5A DC input
(center positive)
LEDs
2 x Speed/Status
2 x Link/Activity
1 x Power
2 x Speed/Status
2 x Link/Activity
1 x Power
2 x Speed/Status
2 x Link/Activity
1 x Sync
1 x Power
4 x Link/Activity
1 x Power
4 x Link/Activity
1 x Sync
1 x Power
In-Line Mode
Yes
Yes
Yes
Yes
Yes
Dual SPAN Inputs Mode
No
Yes
Yes
Yes
Yes
In-Line Latency
2 ns
1G: 380 ± 8 ns
100M: 720 ± 24 ns
10M: 7600 ± 25 ns
1G: 380 ± 8 ns
100M: 720 ± 24 ns
10M: 7600 ± 25 ns
500 ns1
500 ns1
In-Line Jitter
None
1G: 20 ns
100M: 20 ns
10M: 80 ns
1G: 20 ns
100M: 20 ns
10M: 80 ns
20 ns
20 ns
Fail-Safe
Network link
galvanically
separated
Active bypass and
fast failover circuits
Active bypass and
fast failover circuits
No3
No3
Supported Capture Speed
10M / 100M
10M / 100M / 1G
10M / 100M / 1G
1G / 10G2
1G / 10G2
Capture Performance
3.2 Gbps / 3.2 Mpps
3.2 Gbps / 3.2 Mpps
3.2 Gbps / 3.2 Mpps
3.2 Gbps / 5 Mpps
3.2 Gbps / 5 Mpps
Packet Slicing, Filtering,
Deep Packet Inspection
No
No
No
Yes
Yes
PoE Passthrough
Yes
Yes
Yes
No
No
Hardware Timestamping
Yes: 8 ns, NTP
synchronized
Yes: 8 ns, NTP
synchronized
Yes: 8 ns, NTP
synchronized
1G: 8 ns, NTP
synchronized
10G: 6.4 ns, NTP
synchronized
1G: 8 ns, NTP
synchronized
10G: 6.4 ns, NTP
synchronized
Timing Connectors
—
—
1 x SMA female
(PPS)
1 x SMA female
(GPS)
—
1 x SMA female
(PPS)
1 x SMA female
(GPS)
PPS-in Characteristics
—
—
Rising edge active,
TTL, 50Ω internally
terminated, Vth:
~1.2V, ESD
protection: ±15kV
—
Rising edge active,
TTL, 50Ω internally
terminated, Vth:
~1.2V, ESD
protection: ±15kV
Supported OS
Windows 7/8/10/11,
Linux, macOS
Windows 7/8/10/11,
Linux, macOS
Windows 7/8/10/11,
Linux, macOS
Windows 7/8/10/11,
Linux, macOS
Windows 7/8/10/11,
Linux, macOS
System Requirements
Dual Core Processor
4 GB memory
USB 3.0 port
Dual Core Processor
4 GB memory
USB 3.0 port
Dual Core Processor
4 GB memory
USB 3.0 port
Dual Core Processor
4 GB memory
USB 3.0 port
Dual Core Processor
4 GB memory
USB 3.0 port
Power Consumption (Full
Traffic)
100 Mbps: 2.25 W
10 Mbps: 2.6 W
1 Gbps: 3 W
100 Mbps: 2.25 W
10 Mbps: 2.6 W
1 Gbps: 3 W
100 Mbps: 2.25 W
10 Mbps: 2.6 W
Dependent on the
SFP modules used
Dependent on the
SFP modules used
Dimensions (WxDxH)
69 x 124 x 24 mm
2.72 x 4.88 x 0.94 in
69 x 124 x 24 mm
2.72 x 4.88 x 0.94 in
105 x 124 x 26 mm
4.13 x 4.88 x 1.02 in
105 x 124 x 26 mm
4.13 x 4.88 x 1.02 in
105 x 124 x 26 mm
4.13 x 4.88 x 1.02 in
Weight
176 g / 0.39 lb
176 g / 0.39 lb
280 g / 0.62 lb
280 g / 0.62 lb
280 g / 0.62 lb
7

Storage Temperature
-40 to +80 °C
-40 to 176 °F
-40 to +80 °C
-40 to 176 °F
-40 to +80 °C
-40 to 176 °F
-40 to +80 °C
-40 to 176 °F
-40 to +80 °C
-40 to 176 °F
Operating Temperature
0 to +50 °C
32 to 122 °F
0 to +50 °C
32 to 122 °F
0 to +50 °C
32 to 122 °F
0 to +50 °C
32 to 122 °F
0 to +50 °C
32 to 122 °F
Relative Humidity
10 to 95%,
non-condensing
10 to 95%,
non-condensing
10 to 95%,
non-condensing
10 to 95%,
non-condensing
10 to 95%,
non-condensing
Compliance
RoHS, CE,
EN 45545-2
RoHS, CE,
EN 45545-2
RoHS, CE
RoHS, CE
RoHS, CE
Order Reference
C1AP-100
C1AP-1G
C1AP-1G2
C1AP-10G
C1AP-10G2
1This is an approximate. Actual value will depend on the SFPs used.
2The use of packet slicing and hardware filtering is recommended for 10G capture to avoid oversubscribing the USB 3.0 interface (3.2 Gbps).
3Due to the nature of SFP modules requiring power for operation, ProfiShark 10G/10G+ doesn't include a bypass feature for fail-safe monitoring.
An external TAP can be employed in order to implement fail-safe monitoring.
1.4. Advanced Timestamping
ProfiShark 1G+ and 10G+ offer multiple advanced timestamping features. The GPS chip can retrieve the
UTC time, and synchronize it with the internal PPS, with a typical precision of ±32 ns. ProfiShark 1G+ and
10G+ can also retrieve the time via SNTP (using ProfiShark Manager or CLI tool), or use the internal RTC
(real-time clock), and synchronize it via an external PPS signal. A PPS output is possible, for
synchronization with another ProfiShark device, or with any other device accepting a PPS input.
These features can be combined in different ways, providing multiple possible options for accurate and
precise timestamping of packets.
The settings and information related to advanced timestamping are located in the ProfiShark Manager's
Timing Tab. This tab is only available when a ProfiShark 1G+ or 10G+ is connected.
Note: For the best results, the GPS antenna should be set up outside, or near a window. Other factors can
affect results, such as weather, cloudiness, and geographical location in regards to satellite availability. The
GPS can take a minute to synchronize the UTC time with the internal PPS. The stability of the
synchronization increases over time and may take up to 15 minutes to reach its peak.
8

1.5. Interfaces & LED Behavior
1.5.1. ProfiShark 100M Interface
1, 2
RJ45 Ethernet port A and B
3, 6
Link/Activity LEDs
4, 5
Speed LEDs
7
Power LED
8
Optional DC power input (5V, 1A, center positive)
9
USB 3.0 port type B
9

1.5.2. ProfiShark 100M LED Behavior
LED state
Meaning
3and/or 6steady green
The port is linked.
3and/or 6blinking green
The port is linked and has RX/TX activity (traffic is passing through).
4steady green
ProfiShark operating at 10 Mbps speed.
4blinking green
ProfiShark is initializing.
5steady green
ProfiShark operating at 100 Mbps speed.
5blinking green
ProfiShark firmware is corrupted.
4+5blinking green
ProfiShark is not connected or is trying to connect.
4+5alternating blinking
ProfiShark cannot find a common speed between the connected devices.
7off
No USB cable nor power cable are connected.
7on
USB cable and/or power cable are connected.
7blinking
Constant synchronization between system time and hardware timestamp
(blink ON every even second, blink OFF every odd second).
10

1.5.3. ProfiShark 1G Interface
1, 2
RJ45 Ethernet port A and B
3, 6
Link/Activity LEDs
4, 5
Speed LEDs
7
Power LED
8
Optional DC power input (5V, 1A, center positive)
9
USB 3.0 port type B
11

1.5.4. ProfiShark 1G LED Behavior
LED state
Meaning
3and/or 6steady green
The port is linked.
3and/or 6blinking green
The port is linked and has RX/TX activity (traffic is passing through).
4steady green
ProfiShark operating at 10 Mbps speed.
5steady green
ProfiShark operating at 100 Mbps speed.
4+5steady green
ProfiShark operating at 1 Gbps speed.
4+5blinking green
ProfiShark is not connected or is trying to connect.
4+5alternating blinking
ProfiShark cannot find a common speed between the connected devices.
7off
No USB cable nor power cable are connected.
7on
USB cable and/or power cable are connected.
7blinking
Constant synchronization between system time and hardware timestamp
(blink ON every even second, blink OFF every odd second).
12

1.5.5. ProfiShark 1G+ Interface
1, 2
RJ45 Ethernet port A and B
3, 6
Link/Activity LEDs
4, 5
Speed LEDs
7
Power LED
8
Optional DC power input (5V, 1A, center positive)
9
USB 3.0 port type B
10
SMA female connector (PPS in/out)
11
SMA female connector (GPS/GLONASS antenna)
12
Sync LED
13

1.5.6. ProfiShark 1G+ LED Behavior
LED state
Meaning
3and/or 6steady green
The port is linked.
3and/or 6blinking green
The port is linked and has RX/TX activity (traffic is passing through).
4steady green
ProfiShark operating at 10 Mbps speed.
5steady green
ProfiShark operating at 100 Mbps speed.
4+5steady green
ProfiShark operating at 1 Gbps speed.
4+5blinking green
ProfiShark is not connected or is trying to connect.
4+5alternating blinking
ProfiShark cannot find a common speed between the connected devices.
7off
No USB cable nor power cable are connected.
7on
USB cable and/or power cable are connected.
7blinking
Constant synchronization between system time and hardware timestamp
(blink ON every even second, blink OFF every odd second).
12 on
Internal timestamp synchronized with the configured time system (GPS,
NTP, etc.) with an accuracy of ± 16 ns.
14

1.5.7. ProfiShark 10G Interface
1, 2
SFP+ port A and B
3, 4, 5, 6
SFP and network status and activity LEDs
7
Power LED
8
Optional DC power input (5V, 1A, center positive)
9
USB 3.0 port type B
15

1.5.8. ProfiShark 10G LED Behavior
LED state
Meaning
3+4and/or 5+6orange
No SFP module present or detected.
3+4and/or 5+6green slow blink
No link.
3+4and/or 5+6red
Connect additional power.
4and/or 6green
SPAN mode, link up.
4and/or 6green fast blink
SPAN mode, traffic activity.
3+4+5+6green
In-Line mode, link up.
3+4+5+6green fast blink
In-Line mode, traffic activity.
7off
No USB cable nor power cable are connected.
7on
USB cable and/or power cable are connected.
7blinking
Constant synchronization between system time and hardware
timestamp (blink ON every even second, blink OFF every odd second).
16

1.5.9. ProfiShark 10G+ Interface
1, 2
SFP+ port A and B
3, 4, 5, 6
SFP and network status and activity LEDs
7
Power LED
8
Optional DC power input (5V, 1A, center positive)
9
USB 3.0 port type B
10
SMA female connector (PPS in/out)
11
SMA female connector (GPS/GLONASS antenna)
12
Sync LED
17

1.5.10. ProfiShark 10G+ LED Behavior
LED state
Meaning
3+4and/or 5+6orange
No SFP module present or detected.
3+4and/or 5+6green slow blink
No link.
3+4and/or 5+6red
Connect additional power.
4and/or 6green
SPAN mode, link up.
4and/or 6green fast blink
SPAN mode, traffic activity.
3+4+5+6green
In-Line mode, link up.
3+4+5+6green fast blink
In-Line mode, traffic activity.
7off
No USB cable nor power cable are connected.
7on
USB cable and/or power cable are connected.
7blinking
Constant synchronization between system time and hardware
timestamp (blink ON every even second, blink OFF every odd second).
12 on
Internal timestamp synchronized with the configured time system
(GPS, NTP, etc.) with an accuracy of ± 16 ns.
18

2. Getting Started
2.1. ProfiShark Software Setup
2.1.1. Windows
To install the ProfiShark Manager on Windows, launch the setup utility located in the "\Windows\Installer\"
folder of the USB flash drive. Uninstall any previous version of the ProfiShark Manager before starting the
setup utility.
1. Allow the installation to proceed when prompted by Windows User Account Control, and follow the
on-screen instructions.
2. When prompted, disconnect and reconnect the ProfiShark.
3. Wait for the installation to complete.
4. Launch the ProfiShark Manager via the shortcut created in the start menu.
2.1.2. Linux
ProfiShark drivers and software can be installed using our repository located at https://ubuntu.profitap.com/.
Supported distributions:
● Ubuntu 20.04
● Ubuntu 22.04
● Kali Linux
● Debian 10
● Debian 11
● Debian 12
Use the following commands:
wget https://ubuntu.profitap.com/public.key
sudo apt-key add public.key
sudo add-apt-repository https://ubuntu.profitap.com/
sudo apt-get update
If the third step fails on Kali Linux, run the following alternative command:
sudo sh -c 'echo "deb https://ubuntu.profitap.com/ kali-rolling main" >>
/etc/apt/sources.list'
After these commands, you should be able to see all the available drivers, using:
apt-cache search profishark-linux
19

Install the appropriate one with:
sudo apt-get install profishark-linux-driver-X.YY.0-ZZ
Where X is the kernel major version, YY is the kernel minor version, and ZZ is the distribution release.
This repository will be updated nightly, and will contain the latest driver version built against the latest kernel
releases.
If you cannot find the package corresponding to your kernel version, please contact [e-mail].
You can install the ProfiShark Manager software with the following command:
apt-get install profishark-manager
The management software can be run with:
/usr/bin/profishark/profishark-manager
2.1.3. macOS
macOS 10.15 Catalina and earlier
Run the installer v1.0.35 from the ProfiShark USB key's "macOS" folder.
For the installation to complete, a reboot of the system may be required.
macOS 11 Big Sur and later
Unpack the installer v3+ from the ProfiShark USB key's "macOS" folder.
Copy the unpacked ProfiShark application to the "Applications" folder and start it.
On the ProfiShark Manager's home tab, click the "Manage system extension" button to start the system
extension (driver) installation.
20