Common options: -a : force attack mode (1/WEP, 2/WPA-PSK) -e : target selection: network identifier -b : target selection: access point's MAC -p : SMP support: # of processes to start -q : enable quiet mode (no status output) -w : path to a dictionary file Static WEP cracking options: -c : search alpha-numeric characters only -t : search binary coded decimal chr only -d : debug - specify beginning of the key -m : MAC address to filter usable packets -n : WEP key length: 64 / 128 / 152 / 256 -i : WEP key index (1 to 4), default: any -f : bruteforce fudge factor, default: 2 -k : disable one attack method (1 to 17) -x : do bruteforce the last two keybytes -y : experimental single bruteforce mode