ESET finds mystery network intermittently on boot

Forums › Microsoft Windows › ESET finds mystery network intermittently on boot

Oubadah

676 posts

Ultimate Geek
+1 received by user: 12

#171846 2-May-2015 22:03

I recently built a new PC, and decided to purchase an ESS license for it after using free AVs for several years. For the first week everything was normal, but over the last few days ESET has been intermittently showing a "New Network Detected" pop up when Windows starts (asking me if it's a home or public net):

Subnet: 169.254.120.0
DNS extension: [PFsense router name]
DHCP address: 192.168.2.1 (PFsense router IP)

It seems to be detecting my network, which it already has configured as a 'zone' but with 169.254.120.0 instead of the actual subnet (192.168.2.0).

What I want to know is where it's getting the 169.254.120.0 from.

Any ideas?

Inphinity

2780 posts

Uber Geek
+1 received by user: 1184

#1295931 2-May-2015 22:05

that is Window's default DHCP assignment range, if it doesn't successfully obtain a lease from a DHCP server, so possibly there is an issue with the DHCP lease assignments being provided in a timely manner.

Oubadah

676 posts

Ultimate Geek
+1 received by user: 12

#1295932 2-May-2015 22:23

Inphinity: that is Window's default DHCP assignment range, if it doesn't successfully obtain a lease from a DHCP server, so possibly there is an issue with the DHCP lease assignments being provided in a timely manner.

Do you think ESET is just jumping the gun, maybe 'detecting' before the NIC has even initialised?

This is what I think sometimes happens on some of my other PCs when they cry wolf about 'unavailable' network drives they have mapped. They give the tray pop-up warning the moment windows logs on, but the drive is immediately available. I always assumed that was because the PC was still in the process of initialising the NIC driver and receiving a lease when windows tried to check for the drive.

Lias

5655 posts

Uber Geek
+1 received by user: 3978

ID Verified

Trusted

Lifetime subscriber

#1295957 3-May-2015 03:54

Its the APIPA range.

https://en.wikipedia.org/wiki/Link-local_address

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup. Opinions are my own and not the views of my employer.