Re: Monitoring IP NAT Traffic in front of Firewall

[Jaap Keuter <jaap.keuter () xs4all nl>]

On 05/28/2010 06:55 AM, Sankung Sawo wrote:
> I am monitoring ip traffic infront of a firewall with NAT Overload. I
> want to know whether the TCP port displayed in the capture window is the
> external port number or the internal port translation number.
> Thanks
> sankung

Hi,

That would be the external one. There's no way for Wireshark to know what 
translations your NAT performs.

Thanks,
Jaap
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe