Socket Spy is multipurpose utility initially created for trapping Winsock, SNMPAPI, ICMP calls and network TCP/UDP traffic of already active or new processes.
B. Lee, Y. Kim, and J. Kim. Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security, page 271--281. New York, NY, USA, ACM, (2010)
M. Bork, L. Geiger, C. Schneider, and A. Zündorf. ECMDA-FA, volume 5095 of Lecture Notes in Computer Science, page 33--47. Springer, (2008)http://dblp.uni-trier.de/db/conf/ecmdafa/ecmdafa2008.html#BorkGSZ08.