A really big NAT serving, say, eighteen million customers, can easily be
so dense that if there's a bit of clock skew between a web server and
the NAT operator, another customer might have used the same port at the
time recorded by the web server.
Therefore, I think it's safer to say that it's the NAT operator's
responsibility to log enough. Umpteen million web sites will continue
to use apache's common log format, so the NAT operator has to log
what's needed to work with that format anyway.
Arnt
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf