Articles and demos from March 1999.
Logging all the calls to WinSock with a fake wsock32.dll standing between an executable and the real DLL.
wsock32.dll