SystemTap (the kernel probing tool build into Linux) is coming along pretty well - I needed to create something to alert me when arbitrary apps set TCP_NODELAY last week, spend a little while looking at SystemTap, made a simple script that probes at tcp.setsockopt(), got the info I needed, and printed it presentably.
I added the script to http://sourceware.org/systemtap/wiki/WarStories . Check it out and others, it's pretty easy to pick up.