Which I didn't write a output to say what is being process..
lsof save that day. lsof can monitor file being open, which includes sockets.
For my case, the usage is easy
lsof +r -p
The -p is for opening process, +r is to repeat until no file is opened by the process.