How visualize TCP/UDP traffic from IP/port range ?

Hello,

I’ve got the following setup:
Internet ---- RouterOS ----- Linux Host ---- PC

The Linux Host implement do NAT on traffic from PC.
I would like to check if this NAT is properly done.

My first idea was to connect on RouterOS device and use Packet Sniffer but, if I’m not mistaken, on 6.48.5, it requires simple port values, not a whole range of port (1000 or so).

I thought I could mark traffic (MANGLE table) coming in but not surprisingly, Packet Sniffer ignores mark.

Any idea ?

Best regards

you can log the traffic from the NAT rule and see in the log what it is doing.

Yes, I think this reply to my needs.
Thanks for replying.

If the log rule is strictly focused on the IP/port range I’m after, this won’t produce too much log data.
Thanks again