for pid in $(ls /proc | grep -E '^[0-9]+$'); do swap=$(grep VmSwap /proc/$pid/status 2>/dev/null | awk '{print $2}'); if [[ -n "$swap" && "$swap" -gt 0 ]]; then cmd=$(tr '\0' ' ' < /proc/$pid/cmdline); cgroup=$(cat /proc/$pid/cgroup 2>/dev/null);
container_id=$(echo "$cgroup" | grep -Eo '[a-f0-9]{64}' | head -n1);
if [[ -z "$container_id" ]]; then container_id=$(echo "$cgroup" | grep -Eo 'docker-[a-f0-9]+' | sed 's/docker-//' | head -n1); fi; echo -e "$swap KB\tPID: $pid\tCID: ${container_id:-host}\tCMD: $cmd"; fi; done | sort -nr | head