Can I trace NAT traffic?

[yeopaul]

Can I trace the source of the NAT traffic?

My customer has some remote sites connected to an untrusted network before linking back to HQ. The traffic is NAT before entering HQ. The customer is thinking of tracing the source address of those machines accessing their network. Is there any tool for this? Any advise?

[lisa.hall]

This can be done in two ways

a) Install a sniffer in the remote network and try to monitor from the HQ

b) If you are able to access the remote side router issue the command "show ip nat translation" and you will able to know the exact IP address which is translated and accessing your network.