Best practice would be to pack the service into a jail and then use `ractl` to monitor I/O. Could also then monitor the VNET socket of the jail for network stats.

Or you just grab the PID and get it through that. A bit more manual, but composable.