root@OpenWrt:~# iwconfig
lo        no wireless extensions.

eth0      no wireless extensions.

eth0.0    no wireless extensions.

eth0.1    no wireless extensions.

wifi0     no wireless extensions.

ppp0      no wireless extensions.

kis       IEEE 802.11g  ESSID:""
          Mode:Monitor  Frequency:2.422 GHz  Access Point: 00:0F:xx:xx:xx:xx
          Bit Rate:0 kb/s   Tx-Power:20 dBm   Sensitivity=0/3
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          Link Quality=0/94  Signal level=-95 dBm  Noise level=-95 dBm
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

root@OpenWrt:~# kismet_server
Suid priv-dropping disabled.  This may not be secure.
No specific sources given to be enabled, all will be enabled.
Enabling channel hopping.
Enabling channel splitting.
Source 0 (AtherosG): Enabling monitor mode for madwifi_g source interface wifi0 channel 6...
NOTICE:  Created Madwifi-NG VAP kis
WARNING: wifi0 appears to be using Madwifi-NG.  Some versions of the Madwifi-NG drivers have problems in monitor mode, especially if non-monitor VAPs are active.  If you experience problems, be sure to try the latest versions of Madwifi-NG and remove other VAPs
Source 0 (AtherosG): Opening madwifi_g source interface kis...
Allowing clients to fetch WEP keys.
NOTICE: bind address not specified, using INADDR_ANY.
Logging networks to Kismet-Nov-26-2006-1.network
Logging networks in CSV format to Kismet-Nov-26-2006-1.csv
Logging networks in XML format to Kismet-Nov-26-2006-1.xml
Logging cryptographically weak packets to Kismet-Nov-26-2006-1.weak
Logging cisco product information to Kismet-Nov-26-2006-1.cisco
Logging data to Kismet-Nov-26-2006-1.dump
Writing data files to disk every 300 seconds.
Mangling encrypted and fuzzy data packets.
Tracking probe responses and associating probe networks.
Reading AP manufacturer data and defaults from /etc/kismet/ap_manuf
Reading client manufacturer data and defaults from /etc/kismet/client_manuf
Dump file format: wiretap (local code) dump
Crypt file format: airsnort (weak packet) dump
Kismet 2006.04.R1 (Kismet)
Logging data networks CSV XML weak cisco
Listening on port 2501.
Allowing connections from 192.168.2.100/255.255.255.255
Registering builtin client/server protocols...
Registering requested alerts...
Registering builtin timer events...
Gathering packets...
Accepted interface connection from 192.168.2.100

root@OpenWrt:~# tcpdump -vv -i kis
tcpdump: WARNING: kis: no IPv4 address assigned
tcpdump: listening on kis, link-type IEEE802_11_RADIO (802.11 plus BSD radio information header), capture size 96 bytes

0 packets captured
2 packets received by filter
0 packets dropped by kernel

root@OpenWrt:~# iwlist ath0 scan
ath0      Scan completed :
          Cell 01 - Address: 00:15:xx:xx:xx:xx
                    ESSID:"FRITZ!Box Fon WLAN 7170"
                    Mode:Master
                    Frequency:2.437 GHz (Channel 6)
                    Quality=3/94  Signal level=-92 dBm  Noise level=-95 dBm
                    Encryption key:on
                    Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 22 Mb/s
                              6 Mb/s; 9 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s
                              36 Mb/s; 48 Mb/s; 54 Mb/s
                    Extra:bcn_int=100
                    IE: WPA Version 1
                        Group Cipher : TKIP
                        Pairwise Ciphers (1) : TKIP
                        Authentication Suites (1) : PSK