network and nmap doubt

[Joao Daniel <joaodanielnevesss () hotmail com>]

I was figuring out if I can discoverer how many computers are behind a 
NAT. As far as I know a NAT works like state firewall by  blocking some 
types of TCP packages.

I assumed that NAT will (of course?) block SYN packages. So, I tried to 
ran:

nmap -PA IP
nmap -sA IP

Both gave me just 1 Host Up. This is not true.  My questions are:

1) Why it did not work ?

2) Is it possible to do it ? (I want to find out how, dont tell, just 
say yes or no)
    2a) Will it need scripts?

3) Where I can look out for Nmap's scripts ?


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/