Re: Logging NAT Transactions
There may be an easier way, but what I do is two tcpdump sessions always running on my system saving the data as files, one on the LAN side and one of the WAN side. The tcpdump files are in 10 minute chunks, auto changing. Then, if I need to trace back something, I figure it out as a post process.
For example, I got an e-mail from my ISP one time saying that I had been a bad boy. Given the time range of the issue, I was easily able to isolate the issue down to my nephews computer, when it was on my LAN one time so he could print a homework assignment.
Any follow-up information on your issue would be appreciated. Please have the courtesy to report back.