[Supernoob]

On my DHCP client list, I've got a mysterious entry called 'Elvis'. I've checked every possible measure, set up WEP, used MAC address filtering, IP filters, reset my router, even walked around the house with my PSP to sniff out a wireless router.

I'm using a Belkin wireless router, and the DHCP list has elvis at the top highlighted. I can't figure it out.

Jun.24.2006 21:33:35 security:Session -- Prot: 17, 87.74.68.154:50001 > 83.146.21.5:53 97712.157 ~ 98249.672 size 5027/16587 time-out
Jun.24.2006 21:33:42 security:98255.975 Blocked Prot=17, 85.167.106.111:63188 > 87.74.68.154:4166 -Default Defense
Jun.24.2006 21:33:42 security:98255.975 Blocked Prot=17, 85.167.106.111:63188 > 87.74.68.154:4166 -Disallowed Destination IP
Jun.24.2006 21:34:03 security:98277.450 Blocked Prot=6, 87.74.48.178:10188 > 87.74.68.154:139, S Seq=0, Ack=0 -Default Defense
Jun.24.2006 21:34:03 security:98277.450 Blocked Prot=6, 87.74.48.178:10188 > 87.74.68.154:139, S Seq=0, Ack=0 -Disallowed Destination IP
Jun.24.2006 21:34:12 security:98286.326 Blocked Prot=6, 87.74.94.76:16041 > 87.74.68.154:445, S Seq=0, Ack=0 -Default Defense
Jun.24.2006 21:34:12 security:98286.326 Blocked Prot=6, 87.74.94.76:16041 > 87.74.68.154:445, S Seq=0, Ack=0 -Disallowed Destination IP
Jun.24.2006 21:34:25 security:98298.924 Blocked Prot=6, 87.74.114.196:2623 > 87.74.68.154:135, S Seq=16776047, Ack=0 -Default Defense
Jun.24.2006 21:34:25 security:98298.924 Blocked Prot=6, 87.74.114.196:2623 > 87.74.68.154:135, S Seq=16776047, Ack=0 -Disallowed Destination IP
Jun.24.2006 21:34:45 security:98319.517 Blocked Prot=17, 204.16.208.110:44355 > 87.74.68.154:1026 -Default Defense
Jun.24.2006 21:34:45 security:98319.517 Blocked Prot=17, 204.16.208.110:44355 > 87.74.68.154:1026 -Disallowed Destination IP
Jun.24.2006 21:34:45 security:98319.518 Blocked Prot=17, 204.16.208.110:44355 > 87.74.68.154:1027 -Default Defense
Jun.24.2006 21:34:45 security:98319.518 Blocked Prot=17, 204.16.208.110:44355 > 87.74.68.154:1027 -Disallowed Destination IP
Jun.24.2006 21:34:51 security:98325.281 Blocked Prot=17, 87.219.179.151:7204 > 87.74.68.154:11475 -Default Defense
Jun.24.2006 21:34:51 security:98325.281 Blocked Prot=17, 87.219.179.151:7204 > 87.74.68.154:11475 -Disallowed Destination IP




HELP!!!!

[Advertisements]

Your computer name isn't Elvis is it?
(check by right-clicking on My Computer -> Properties -> Computer Name)

Change your SSID to something other than the default, most Belkins use exactly the same name with exactly the same default encryption keys.

[Neil Jones]

Your computer name isn't Elvis is it?
(check by right-clicking on My Computer -> Properties -> Computer Name)

Change your SSID to something other than the default, most Belkins use exactly the same name with exactly the same default encryption keys.

[Supernoob]

My computer isn't called Elvis. Neither is my flatmate's. I changed my SSID to 'GetYourOwn'. There's an irony.

The IP adress Pool is set to end at .5, but this guy is .9, with the rest of the numbers being the same. could it be a program I'm using? I haven't had any programs struggle to get online, which is what I would expect, had I blocked it.

Edited by Supernoob, 25 June 2006 - 02:21 PM.

[Neil Jones]

Could be a program or a router that's reporting an erroneous DHCP client when there actually isn't one.

Unplug your computer from the router or disable your wireless card temporarily, then power off and wait and power on the router to clear the DHCP list. Give it a few minutes and then plug in your system/reactivate wireless. Go to your DHCP client list and see if Elvis has nabbed the first entry in the time that your system was disconnected. This will eliminate your computer and everything about it altogether.

[I love my vans]

You could just disable the "Broadcast SSID", then the culprit will not know what wireless networks are out there.

[Supernoob]

I reset the router AND powered it down, plus unplugged the cable from the router to the back of my pc. I allowed the PC to register that the router had gone, then reset the machine with the router plugged in and powered up.
Elvis is still there in the DHCP list. Interestingly, 'Russ' (the name of this computer) isn't even listed there now.

Anyone know What the... is going on?

[dsenette]

does your dhcp list tell you when the lease is set to expire on this elvis machine?

[Supernoob]

Under LAN settings, the 'Lease time' (whatever that is) is set to 'forever'. Can I change that without fear of messing up my system?

[dsenette]

yeah...you should change that to something between 3 and 8 days....that elvis cat probably got on your network before it was secure...and the dhcp server is holding the lease for it....change that setting...and wait till the lease expiration time..you should see the "the king" leave the building...so to speak

[Supernoob]

I've set it to half hour. Let's see what happens.

[dsenette]

deffinitely make sure you change that to more than a half an hour once this test is complete

[Supernoob]

Elvis is still there.

[dsenette]

hmmm....you don't live near graceland do you?....do you know a good priest who does exorcisms?

[Supernoob]

I am absolutely stumped. I've tried everything.

[dsenette]

would you be up for doing a factory reset on the router and starting over reconfiguring it....or is it not that important to you? (the dhcp lease should have done it...)