One problem. NeoTrace doesn't seem to work when you're running ZoneAlarm in high security mode, even if you enable auto access for ping and tracert. What you have to do is drop your security to medium while you're running NeoTrace, and then get your shields up again afterwards. Whether you're prepared to do that depends on your paranoia level.
Personally I've tired of tracing access attempts. What exactly are you going to do with the information? Just check your firewall logs for repeated attempts at different ports from the same IP address. In my experience, ISPs are not going to bother with calls along the lines of "Some guy has tried to access one of my ports" because otherwise they'd never get any other work done - it happens all the time. What they probably will deal with is a log showing systematic probing of your ports from a single address - and in that case they're perfectly capable of tracing the address themselves. Why not save yourself the hassle?
Sorry to put a dampener on your enthusiasm to catch these creeps, but it just seems you have to accept the occasional probe.
Incidentally, do you have a fixed IP address, or does it change every time you log on?