Have you looked at airtun-ng? It does kinda the same thing. Also, be aware that this will only work for TKIP encryption. For CCMP no matter how long you try to decrypt you will not be able to sniff. You may end up with a huge amount of encrypted packets, but you will not be able to decrypt them, sorry. :\ But the idea *IS* cool, and I look forward to the finished product as a new tool in my arsenal against WPA-TKIP .