How can we inspect NAT tables in ingress-sbox?

What parameters to pass to either docker exec or nsenter?