Hi -

I've tested your patch on i386. There were 2 minor problems:
-There is some strange code in ural_set_chan(), the "for"
 loop in the RAL_RF_5222 case. I guess the "i<..." is an
 accident.
-For the "rate" field in the rx ratiotap header to have an effect,
 the RADIOTAP_RATE flag must be set.
 On my hardware
	ral0: ASUS 802.11g WLAN Drive, rev 2.00/0.01, addr 2
	ral0: MAC/BBP RT2570 (rev 0x03), RF RT2526
 however the rx rate recognition did not work at all, the rate
 field in the descriptor was 46 when I looked, which
 ural_rxrate() can't make sense of.

Otherwise it worked in normal AP mode against an old Cisco
access point (11mbit max).

best regards
Matthias