how to make sense of the XP firewall log

Win XP has a built in firewall, which i think does a decent job. But the problem arise that how do we make sense of the log to know of an attack, and is it possible it define new rules.