The article introduces a terminal tool called 'what' (also known as 'bandwhich') that displays current network utilization by process, connection, and remote IP/hostname. It works by sniffing a given network interface and recording IP packet size, cross-referencing it with the /proc filesystem on Linux, lsof on macOS, or using WinApi on Windows. The tool is in passive maintenance, but contributions are welcome. It can be installed on various platforms, including Linux, macOS, and Windows, and has various features such as raw output mode and DNS query display.