On Mon, 2012-08-13 at 14:28 +0200, Nikola Pajkovsky wrote:
I don't understand. you wanna see, which process has open socket?
Ok let me see whether I can describe it better:
Right now data is collected (and then sorted like this):
We have one entry for each SRC:port - DST:port connection,... right?
And AFAIU, each entry just sums up.
Now the following would be nice:
a) Add another counting mode, where not totals are summed up, but
packets/bytes per time frame are measured (thereby making it more like
the top utility).
b) Add (for both of these counting modes) another grouping mode, i.e.
packets/bytes are not counted per connection (SRC:port - DST:port) but
per process.
E.g. If you imagine a webbrowser, I'd like to have a mode where I don't
see the single connections from it to different addresses, but the total
traffic generated by the process.
Clear? :)
Cheers,
Chris.