reinj attack -successful configs?

Can some of you post your configs for successful reinjection attacks?

I've been fighting with this thing for weeks and can't get it to
successfully reinject.  I can unsuccessfully reinject traffic (cut out
the "check" from the code floods the network), however with this config,
I am yet to be successful:

Attacker :  OpenBSD 3.2 on an IBM Thinkpad T30, SMC PrismII wireless
card with .83 firmware

Access Point being attacked:  Have tried with Cisco 1200, Orinoco
AP-1000, Orinoco AP2000, and SMC of some sort.

Client machine: Windows 2000 SP3 on IBM T-30 using Orinoco gold 802.11b
card

Sniffing machine: Mandrake 9.1 linux on and IBM A-21 machine running
AIRSNORT on an orinoco gold 802.11b card
=20

What has worked for you?

Any help would be greatly appreciated.

Thanks!

Joseph