Identifying processes that open MySQL connections

I need to identify which application process issues a large number of MySQL connections on a Linux system. The show processlist sql command or tools like innotop do not really help, as they only show db user and host, and i doubt that i catch all statements that way. I was thinking to use something on the network level, like tcpdump or netstat. Any suggestions?