ASA 8.2: NAT config and counters

[Taimur]

Hi all,

I'm trying to understand the NAT config on an ASA running v8.2. The device has been through generations of different engineers and as such there seems to be a lot of cruft config on the device. I've got two questions:

1. NAT

nat (inside) 20 access-list Nat-XC
nat (inside) 19 access-list Svr-Access
nat (inside) 0 0.0.0.0 0.0.0.0
global (outside) 20 x.y.z.240 netmask 255.255.255.240
global (outside) 20 x.y.z.241 netmask 255.255.255.240
global (outside) 20 x.y.z.242 netmask 255.255.255.240
global (outside) 19 x.y.z.243

With the above NAT configured, does NAT ID '19' and '20' ever get used or does the ID 0 '0.0.0.0 0.0.0.0' exempts ALL traffic from NAT?

2. NAT Counters

Is there a way to see counters against the NAT configured above?

I tried using 'show nat' and 'show xlate' but the output is over 20,000 lines and unreadable! There is actually a LOT more NAT configured on the box and some of it might not even be used anymore. Would be great to know if we can find out what's really being used.

Thanks!

[tahscolony]

Show conn | include "ip address of inside host"

 sh conn | i 192.168.18.58
TCP outside 40.97.124.226:443 inside 192.168.18.58:60986, idle 0:00:01, bytes 30313, flags UIO
TCP outside 40.97.145.146:443 inside 192.168.18.58:60832, idle 0:00:12, bytes 21869, flags UIO
TCP outside 40.97.150.98:443 inside 192.168.18.58:61665, idle 0:00:37, bytes 64462, flags UIO
TCP outside 40.97.120.178:443 inside 192.168.18.58:60985, idle 0:00:08, bytes 28207, flags UIO
TCP outside 40.97.120.66:443 inside 192.168.18.58:56102, idle 0:00:38, bytes 527111, flags UIO
TCP outside 40.97.176.34:443 inside 192.168.18.58:61400, idle 0:00:14, bytes 14292, flags UIO
TCP outside 40.97.162.98:443 inside 192.168.18.58:60905, idle 0:00:08, bytes 21622, flags UIO
TCP outside 52.112.65.100:443 inside 192.168.18.58:55993, idle 0:00:29, bytes 1352968, flags UIO
TCP outside 40.97.164.162:443 inside 192.168.18.58:61788, idle 0:00:49, bytes 80485, flags UIO
TCP outside 40.97.162.114:443 inside 192.168.18.58:61000, idle 0:00:08, bytes 28962, flags UIO
TCP outside 40.97.143.130:443 inside 192.168.18.58:61200, idle 0:00:06, bytes 27080, flags UIO
TCP outside 40.97.143.130:443 inside 192.168.18.58:61199, idle 0:00:16, bytes 18541, flags UIO
TCP outside 93.184.216.180:443 inside 192.168.18.58:61838, idle 0:00:42, bytes 96399, flags UIO