NM3EventCap - Check this out!
Ok...I'll be honest. I am not a hardcore networking guy. And...it doesn't take much to impress me (think of me like Homer Simpson).
That being said, I ran across this post over at the Microsoft Enterprise Networking Team blog.
I had never seen this before. So, I was quite impressed to find out that you can stop a network capture when Windows logs an event. This is going to be quite handy for me when troubleshooting customer issues (and building training classes where I want to have a netmon capture of some specific traffic).
Ran over the the post and check it out.
Clint