Multiple networked devices (22) behind a NAT device (20) are identified by sampling a proportion of data packets traversing the network and comparing the packet IP Identification fields. Depending on proximity of the values in different packets, each sampled packet is associated with one of currently known devices using the NAT, or identified with a newly recognized device.
