I am happily limiting upload speed by port - but really want to limit download by process.
It seems iptables did have functionality for matching and marking packets by process in the form of
--cmd-owner - but both have now been removed?
$ iptables -m owner --help ... owner match options: [!] --uid-owner userid[-userid] Match local UID [!] --gid-owner groupid[-groupid] Match local GID [!] --socket-exists Match if socket exists
seems there are options to match by user or group, but not process.
I am aware of trickle, and wondershaper - but neither allow shaping of an already running process