insmod acx iwconfig wlan0 essid somenet iwconfig wlan0 key s:somekey iwconfig wlan0 mode master key restricted iwconfig wlan0 channel 2 ifconfig wlan0 up brctl addif br-lan wlan0 Then in another window ping the wireless device. And then keep running: iwpriv wlan0 SetDebug 0x0fff ; iwpriv wlan0 GetAcx111Info 1 ; iwpriv wlan0 SetDebug 0x0 dmesg | grep "dump internal txdesc" -A 10 | grep Status and then after a while, you will catch these: dump internal txdesc 13: size 0x30 mem pos a4034d38 next 0x12D6C acx mem pointer (dynamic) 0x0 host mem pointer (dynamic) 0x145D52D8 length (dynamic) 0x3C CTL (dynamic) 0xC0 CTL2 (dynamic) 0x0 Status (dynamic) 0x20 Rate (dynamic) 0x1 dump internal txdesc 14: size 0x30 mem pos a4034d6c next 0x12DA0 acx mem pointer (dynamic) 0x0 host mem pointer (dynamic) 0x145D5310 length (dynamic) 0x3C CTL (dynamic) 0xC0 CTL2 (dynamic) 0x0 Status (dynamic) 0x20 Rate (dynamic) 0x1 dump internal txdesc 10: size 0x30 mem pos a4034c9c next 0x12CD0 acx mem pointer (dynamic) 0x0 host mem pointer (dynamic) 0x145D5230 length (dynamic) 0x3C CTL (dynamic) 0xC0 CTL2 (dynamic) 0x0 Status (dynamic) 0x20 Rate (dynamic) 0x1 dump internal txdesc 15: size 0x30 mem pos a4034da0 next 0x12A94 acx mem pointer (dynamic) 0x0 host mem pointer (dynamic) 0x145D5348 length (dynamic) 0x3C CTL (dynamic) 0xC0 CTL2 (dynamic) 0x0 Status (dynamic) 0x20 Rate (dynamic) 0x1 dump internal txdesc 3: size 0x30 mem pos a4034b30 next 0x12B64 acx mem pointer (dynamic) 0x0 host mem pointer (dynamic) 0x145D50A8 length (dynamic) 0x3C CTL (dynamic) 0xC0 CTL2 (dynamic) 0x0 Status (dynamic) 0x20 Rate (dynamic) 0x1 dump internal txdesc 14: size 0x30 mem pos a4034d6c next 0x12DA0 acx mem pointer (dynamic) 0x0 host mem pointer (dynamic) 0x145D5310 length (dynamic) 0x3C CTL (dynamic) 0xC0 CTL2 (dynamic) 0x0 Status (dynamic) 0x20 Rate (dynamic) 0x1