Okey dokey, back with an all new dang-fangled program that may or may not work.
VPN Indicator a.k.a. VIndicator
Works different to PPTPchek, instead of polling rasdial every so often it just sits back and waits to be told what's happening - a side benefit is virtually no processor usage, (>2% on my netbook).
Start it by just double-clicking on the icon, from that point it just runs in the background. Works on x86 or x64.
If a PPTP/L2TP VPN is active an icon will show, on disconnect it gets hidden.
Stop it by running it again or choosing Exit from the icon menu when it's visible.
What it does:
1) When first run it checks for other instances of itself, if it finds any it tells it to exit and then exits itself.
2) It sets up a Notification Event on the EventLogs and then waits.
3) When an Event is signaled it fetches the data and if it matches the particular source, (RasClient), and EventIDs, (Vista+ = 20225/20226), it does all the icon-y things.
Because most of the time it spends sitting on its bum I'll look at finding where the network stats are hidden and poll them every 250ms or so, so if they change I can just toggle icons to show activity, (that's the theory anyway).
Haven't tested it on XP, (not really required), but it shouldn't do anything nasty - it'll either indicate something or it won't.
devcon status "*DEV_001C*" | find /i "disabled" >NUL
if errorlevel 1 goto running
rem Enable device
rem disable device
Changed: No longer requires rasdial.exe to get initial connection
Changed: No longer relies on text within EventLog entry for information
Fixed: If the PC itself runs a VPN server, Event IDs 20267 and 20268 weren't reported. Now uses Event IDs 20225/20226.
Added: Shows IP in ToolTipUPDATE:
Changed: Logging disabled
Changed: Refined Notification Event which hopefully will reduce load a little
Fixed: Small bug with Quit on Disconnect
Changed: RAS stats polled every 100ms, icon reflects data direction
Changed: Tooltip auto-scales data kB -> PB, removed transfer rate
Removed: Debugging stuff
Added: Windows version check, doesn't run on less than Vista now
Added: Start with Windows option, (HKCU Run)
Added: Checks for Remote Access Service installation - required for MS PPTP/L2TP VPN connections
Fix: Hopefully reports which connection was disconnected rather than username in the log now
Added: Menu item Quit on Disconnection added, setting is saved to .ini for subsequent starts - obviously the icon needs to be visible to select it
Added: Icon toggles if amount of data Rx/Tx changes, only does this every 500ms - any more often increases CPU load
Added: Tooltip shows data Rx/Tx and rate
Maybe: The event checking has been reduced to 2 seconds - CPU load increases the shorter the interval