Take a look at Airodump-ng.
It lists all the AP's a station is probing for.