Microsoft has come out with a utility called Port Reporter. Very similar to tcpview from SysInternals but it does run as a service and have an associated parser. I haven't played with it much yet but at first glance it appears to be exactly what I've been looking for.
Knowledge base article: http://support.microsoft.com/?id=837243
I may post more about it when I have had a proper look.blog comments powered by Disqus