At work, I have an overly elabroate sniffing scheme: Wildpackets Omnipeek with some RFGrabber antennas, absolutely beautiful the power you have with a system like that. Unfortunately I use it for only good purposes but man, a system like that with some directional antennas would be a perfect way to snag entry into wireless networks And let's not even talk about how WPA-PSK is hardly ever used, most of the time it is just WEP (complete with the RC5 scheduling weakness). I don't even think I've seen anyone use WPA2 (with AES-CCMP) yet, but WPA/WPA2 PSK is just about uncrackable - WEP weaknesses are a different story.