I am a new user to sygate personal firewall v.5 My system tray icon, as well as my traffic history graph shows continuous incoming traffic. My cable modem is not blinking to show any data transfer, but the system tray icon is almost continuously showing incoming traffic. Could this be some traffic internal to my computer which is somehow being logged by the firewall? I suspect an application called NDIS User mode I/O Driver, because when I block that application in the application list the system tray icon shows the data being blocked. Can someone tell me what this application is used for and how I should best configure SPF? Also, there are many "windows services" which show up on the application list which I have no idea whether to allow or block. I really like SPF, but I am somewhat confused. ZA was much easier (I suspect because it didn't give me any choices). Any help/advice would be appreciated.