TDI (Transport Device Interface) monitor, enables one to see commands being sent to network card as a result of higher level calls to socket API. Allows one to see which process is causing the network activity and allows filtering and one can debug