That sounds like an interesting optimization! Have you looked into using ss or lsof to monitor active connections to your process? You could periodically check for connections and trigger SIGSTOP/SIGCONT accordingly. Would a combination of netstat (or ss) with a simple script work for your use case, or are you looking for a more event-driven solution like epoll or inotify on /proc/net/tcp?