ASA Active/Stale Xlate Entries

[ITforever]

Hello,

I have been trying to analyse existing traffic on an ASA and need to figure out active (not stale) xlate info.

If I issue 'show xlate' , it gives me:

Global 192.168.1.1 Local 172.16.1.1

So, how do I find out that if this entry  is actually active (not stale)?

And also, how different is it from 'show nat' output?

Thanks.

[mkazam001]

sh xlate will give you the current active nat translations, they will be removed when they timeout.

sh nat will show the actual nat table based on the nat rules configured on the asa, as well the order in which they will be applied.

Hope that helps.

Azam