Does the millions of ghost networks have anything to do with the fact that the sensitivity of wlan0 is set to 0/200? The highest I can set is 20/200. pathetically easy to use kismet to break WEP. Just gather > 0.5 gb of data, have kismet save as dump, and give it to aircrack. Only use it on your OWN network, of course.
You firstly would have to lock the kismet to the channel i question, then it will depend on the amount of traffic on the network... could take 10 min, could also take several days...