How to list current NAT translations

[yoggit]

Hi all,

I've been trawling and searching for a while, but cannot for the life of me figure out how to list the IP flows through my AC66U. Any ideas?

Thanks,
Yoggit

 

[ColinTaylor]

Network Tools > Netstat

Method = Netstat-nat

 

[RMerlin]

System Log -> Connections as well. That page has the added benefit of having sortable columns now.

 

[yoggit]

Thanks guys. Is there a CLI command?

 

[ColinTaylor]

# netstat-nat -h
args: -h: displays this help
      -n: don't resolve host/portnames
      -p <protocol>        : display connections by protocol
      -s <source-host>     : display connections by source
      -d <destination-host>: display connections by destination
      -S: display SNAT connections
      -D: display DNAT connections (default: SNAT & DNAT)
      -L: display only connections to NAT box itself (doesn't show SNAT & DNAT)
      -R: display only connections routed through the NAT box (doesn't show SNAT & DNAT)
      -x: extended hostnames view
      -r src | dst | src-port | dst-port | state : sort connections
      -o: strip output header
      -N: display NAT box connection information (only valid with SNAT & DNAT)
      -v: print version

      netstat-nat [-S|-D|-L|-R] [-no]
      netstat-nat [-nxo]

# netstat-nat -S -n
Proto NATed Address                       Destination Address                 State
tcp   192.168.1.149:36024                 173.194.76.188:5228                 ESTABLISHED
tcp   192.168.1.149:48186                 34.251.25.102:5223                  ESTABLISHED
tcp   192.168.1.149:52204                 157.240.1.13:443                    ESTABLISHED
tcp   192.168.1.149:56974                 157.240.1.32:443                    ESTABLISHED
tcp   192.168.1.149:49292                 216.58.206.46:443                   TIME_WAIT
tcp   192.168.1.19:39886                  64.233.167.188:5228                 ESTABLISHED
tcp   192.168.1.19:36858                  34.249.183.129:5223                 ESTABLISHED
tcp   192.168.1.231:42900                 62.253.90.133:443                   ESTABLISHED
tcp   192.168.1.231:34504                 62.179.125.144:5222                 ESTABLISHED
tcp   192.168.1.238:49833                 104.25.235.15:443                   ESTABLISHED
tcp   192.168.1.238:49846                 176.32.100.230:443                  ESTABLISHED
tcp   192.168.1.238:49169                 62.254.26.223:993                   ESTABLISHED
tcp   192.168.1.85:56854                  157.240.1.32:443                    ESTABLISHED
tcp   192.168.1.85:38202                  74.125.140.188:5228                 ESTABLISHED
tcp   192.168.1.85:47028                  157.240.1.13:443                    ESTABLISHED
tcp   192.168.1.85:38276                  169.60.79.206:443                   ESTABLISHED
udp   192.168.1.238:58168                 216.58.206.46:443                   ASSURED
udp   192.168.1.96:51996                  23.23.189.6:33434                   UNREPLIED

 

[yoggit]

Brilliant! Thanks a million.

 

[yoggit]

cat /proc/net/ip_conntrack for more detail

 

[ColinTaylor]

Or this which adds the network layer and protocol number at the beginning of each line.

cat /proc/net/nf_conntrack