RFMON works sporadically. You can capture packets. The firmware, driver or stack (or a combination of all 3) do not currently like receiving or sending live packets when it's not associated to a BSSID. This is being worked on, as we speak.