Bandwidth usage report

Hi

If I select Top Clients in the bandwith usage report, I see a lot of incoming traffic to our public IP address. How can I evaluate from where inside the network this traffic was initiated ? Shouldn't it show the NAT'ed internal IP addresses ?

Thanks in advance for any help
Freddie