In some email I received from VaX#n8, sie wrote:
> I don't know if it would be possible, but it would be Really Nice if netstat
> had an option to show which PID had a particular connection open.  I could
> not find such an option, and a sysadmin friend agrees that this would be
> very helpful if you have a suspicious connection open and want to track
> it down.  I imagine the kernel must store this info somewhere since it has
> to deliver packets to said process - I guess via the descriptor table[s].

have a look at

ftp://coombs.anu.edu.au/pub/net/ident/ntop1.18.tar.Z

probably needs a bit of work for current NetBSD before it will work.

but maybe netstat could have a "w" command line option for producing a
"wider" display for those that left 80 columns with their c64's ?