Kismet will work, and aircrack-ptw will work. You just have to be patient with Kismet capturing packets until someone gets injection working.
Look at this thread if you are having Kismet problems.
http://www.internettablettalk.com/fo...3141#post43141

Anyone here working on fixing aireplay?

Aw shucks. So there isn't a passive scanner and cracker combo for N800? How about the N770?

If you want to get a WEP key on your N800 you could use airodump-ng to capture packets and then aircrack-ng to get the key. Problem is that aircrack-ng needs a lot of initialization vectors to work - you'll need to collect maybe 500,000 packets to retrieve the key, and without injection you could be collecting packets for days if the network is not very busy.

Aircrack-ptw only needs about 40,000 for a good chance of sucess as I am sure you know, but you need injection to generate the right packets for that anyway.

It is possible to get injection to work on the N800 as I understand someone has written the right drivers or whatever on a security device based on the N800.

Actually they were using a 770. Unless they both use the same radio. They also want $3000 for it.