If you are a Win32 developer, this article on the scarcely undocumented firewall hook might interest you.  Unlike the network filter hook which supports only one system wide hook, multiple firewall hooks can be installed to monitor network packets.  Neato.