I was thinking about this last night when showing students what wardriving is (we happened to find a WRT54G with no encryption and DHCPing all over the place). I wonder if it's the UPnP being the issue. I know that was a problem for my version, spewing UPnP packets all over the place, until the firmware upgrade and until I told Snort to stop looking for that from the router.