I could have posted this in a separate thread in the Bugs & Feature Suggestions section of the forum, but since we briefly talked about this and I don't know how many users or devs are interested in it (other than us three), I'll post these here (just for examination, don't want to divert the thread from its main subject, aka your suite):I've looked at just about every tool I can find. Scraping a console (or text file) for output is not the way I'd want to go on this. Ultimately, the simple Network view shown in Resource Monitor is all we need, and that does not require running an elevated process. It's the perfect "top N network processes" view. Unfortunately, I can't find any information on how this works. The closest option I can find is the npcap library I mentioned earlier, which perhaps could be used to create a Rainmeter plugin.
https://stackoverflow.com/questions/52360271/windows-resource-monitors-network-activity-c
https://stackoverflow.com/a/51722043
See the things posted by Simon Mourier, apparently the Resource Monitor stuff IS PerfMon, but with some ETW bits (for which there is actually a library on GitHub, as mentioned in the links):
https://github.com/Microsoft/perfview/blob/main/documentation/TraceEvent/TraceEventLibrary.md
Unfortunately that library is not exactly trivial and I have no idea if it can indeed provide all that network connection data since the example is about something else, though I wonder if it can't be somehow used by a Rainmeter plugin. Not sure if the said library could help in making an Event Viewer monitor either, as that would tick another box from the things I thought about and that Rainmeter can't directly do in absolute real-time currently.
Statistics: Posted by Yincognito — Today, 9:12 am