I just installed Eset Smart Security 220.127.116.11 a few hours ago, everything default so far, firewall on automatic still. I am looking at Network connections It shows Eset kernel ekrn.exe Sent: 10 GB, Received: 56 GB Is it only its own traffic, or it includes somehow also traffic from other applications? I somehow doubt very much that Eset kernel needed to download 56 GB or to upload 10 GB. Or is it a bug? I have three WANs (3 adapters) simultaneously. On one (default GW) I was running uTorrent, on another - NewsBinPro from a specific nntp server. On the third - nothing. The traffic displayed for uTorrent is also not clear: Sent and Received values are too small there (but adding together with Eset kernel still too small, especially sent part) and also are changing back and forth between larger and smaller values, again and again, although gradually increasing - as if switching between two somethings (networks?) not sure. But uTorrent is using only one network mostly, as shows Windows Task Manager Networking tab, of course if a peer happens to be on one of 2 other networks, it would probably go through it, even if not default gw. Even adding together those switching back and forth values, I still get less than needed, especially in "sent" column, if counting from the time I started Smart Security. BTW, if expanded, kernel connections are suspicious, looks like they are some peers from uTorrent. And they are changing all the time. Maybe they are shown in kernel as they are scanned by the kernel? But is the kernel also taking credit for sent/received numbers? - And its up/down speeds are 0/0, only sent/received numbers are huge (huge for Eset kernel) Any ideas? Sorry, if it is a known feature described in some FAQ.