I use the modem lights to show modem activity. Sometimes the lights indicate that I am receiving a great deal of data (red color activity) even though I have shut down email and web browser. I use the standard firewall and CentOS 5. I'd like to know which files, if any, are being written to and if there are better firewalls that could be used.