well it all depands what kind of attack he tried ot do ...
sometimes zonealarm is not the most efficient thing to look at.
try to get detail trace posted here when he is trying to hack you in...
netstat should give you all ip connection to your pc so if he is having a direct link with you ...