https://wiki.vasexperts.com/ 2026-04-15T04:15:03+00:00 https://wiki.vasexperts.com/ https://wiki.vasexperts.com/lib/tpl/vaswiki/images/favicon.ico text/html 2026-04-14T16:00:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.com/doku.php?id=dpi:opt_cgnat:abuse_letters&rev=1776182410&do=diff Working with NAT Flow. How to find a subscriber after NAT QoE Stor ModuleSSG DPI control interface NAT Flow configuration Example of working with abuse letters This tutorial is how to find the specific subscriber who is reported abuse. The abuse email usually contains a global address from a NAT pool. We need to understand which of the subscribers went to the resource where the virus activity was detected at a known time behind this NAT-pool. text/html 2026-04-14T16:00:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.com/doku.php?id=dpi:opt_cgnat:cgnat_description&rev=1776182410&do=diff Description and use cases Carrier Grade Network Address Translation allows you: * to share one public IPv4 address between several subscribers without losing the quality of Internet connection – you can assign up to 100 private IP addresses for one public IP address (the ideal ratio is 1:10); text/html 2026-04-14T16:00:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.com/doku.php?id=dpi:opt_cgnat:cgnat_diagnostics&rev=1776182410&do=diff Description of NAT statistics NAT statistics can be logged to stat_log and via fdpi_ctrl. To view queue information, you can dump the NAT profile via fdpi_cli. Logging statistics to fastdpi_stat.log This is configured using the dbg_log_mask parameter in /etc/dpi/fastdpi.conf. text/html 2026-04-14T16:00:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.com/doku.php?id=dpi:opt_cgnat:log&rev=1776182410&do=diff NAT flow export Export NAT flows in IPFIX (Netflow 10) For data analisys on NAT flows on external systems IPFIX export is available (aka netflow v10). Settings of NAT flows export: ipfix_dev=em1 ipfix_nat_udp_collectors=1.2.3.4:1500,1.2.3.5:1501 ipfix_nat_tcp_collectors=1.2.3.6:9418 text/html 2026-04-14T16:00:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.com/doku.php?id=dpi:opt_cgnat:%D1%81gnat_info&rev=1776182410&do=diff Info commands View via fdpi_ctrl the number of active sessions and the assigned white address for a particular private address: fdpi_ctrl list status --service 11 --ip 192.168.4.20 View via fdpi_ctrl the number of active sessions and the assigned white address for a particular login: text/html 2026-04-14T16:00:10+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.com/doku.php?id=dpi:opt_cgnat:%D1%81gnat_settings&rev=1776182410&do=diff services service_11 nat cg-nat Settings and management This service is managed at the separate subscriber level using fdpi_ctrl. Command format: fdpi_ctrl command --service 11 [options list] [IP_list or login] The command syntax and ways of setting IP addresses are described in the Management of policing and services section.