sort processes by swap

(echo "COMM PID SWAP"; for file in /proc/*/status ; do awk '/^Pid|VmSwap|Name/{printf $2 " " $3}END{ print ""}' $file; done | grep kB | grep -wv "0 kB" | sort -k 3 -n -r) | column -t | more

then list all processes with:

systemd-cgls

and match the PID.

list network connections

netstat -na |awk '{print $5}' |cut -d "." -f1,2,3,4 |sort |uniq -c |sort -nr

ss -4 |awk '{print $6}' |cut -d "." -f1,2,3,4 |sort |uniq -c |sort -nr

These lines both returns all the connections open on the server and the destination:port.
On a proxy, it returns all the connections open towards the back-ends.