Trine provides the command here not sofar back in the thread : http://talk.maemo.org/showpost.php?p...&postcount=762 Easiest way to find the attached clients bssid is to capture packets, any attached clients are shown there on the packet capture xterm screen. Since you are already capturing packets, open another xterm (CTRL-Shift-X) to deauth the attached client and you should be able to capture the handshake.