does anyone have any detailed info on how mr. tews was able to modify chop chop to crack WPA e.g commands

also i have tried packetforge as well as -p 0841 to try to speed up the process but havent had any luck, 30 ivs/s is as fast as i get and its not steady. are there any other methods you can suggest with no clients?