The optional kernel module netatop can be loaded to gather statistics about the
TCP and UDP packets that have been transmitted/received per process and per
thread. As soon as atop discovers that this module is active, it shows columns in
the generic screen for the number of transmitted and received packets per
process.
The daemon netatopd takes care that information is gathered about processes that
are finished. For every finished process that has transferred network packets, a
binary record is written to a logfile. The added records in the logfile are read
by atop with every sample to show information about the network activity of
finished processes as well.
The daemon is started automatically in the init script after the kernel module
has been loaded. However, the kernel module netatop can be used without the
netatopd daemon.

• Led

• kernel-source-netatop
• netatop
• netatop-debuginfo