flowtop: various improvements:

[borkmann]

• Byte, packet counter
• Filtering system, e.g. regex filtering on application, revdns, geoip, pid, ports
• Display info more nicely
• Dump information to file or stdout
• Display the user that the process is running as
• Ability to sort connections by the most bytes, packets, or longest connection duration
• Ability to turn off GeoIP lookups
• Ability to turn off name and port resolution
• With all that flowtop will easily replace nethogs(libpcap). I thinkflowtop has real potential for incident response.
• Fix backend for higher throughput