Wireshark-users: Re: [Wireshark-users] Monitoring IP NAT Traffic in front of Firewall

From: Pedro Tumusok <pedro.tumusok@xxxxxxxxx>
Date: Fri, 28 May 2010 09:15:35 +0200
Hi,

The information you want you can get from the NAT session table of
your device, how to display it depends on the device you have.


Best Regards
Pedro

On Fri, May 28, 2010 at 8:37 AM, Jaap Keuter <jaap.keuter@xxxxxxxxx> wrote:
> On 05/28/2010 06:55 AM, Sankung Sawo wrote:
>> I am monitoring ip traffic infront of a firewall with NAT Overload. I
>> want to know whether the TCP port displayed in the capture window is the
>> external port number or the internal port translation number.
>> Thanks
>> sankung
>>
>
> Hi,,
>
> That would be the external one. There's no way for Wireshark to know what
> translations your NAT performs.
>
> Thanks,
> Jaap
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>



-- 
Best regards / Mvh
Jan Pedro Tumusok

I know you love me
And you want to be Friends
And if you dont
at least you need to pretend