refactor netstat subscription