Arp poisoning will need SOCK_RAW which is not the same as injection on wireless network. This is pretty standard packet building.
I guess the n800 can do this

Found this:

http://blog.pierre.droids-corp.org/2...etasploit.html
(scapy)