Well, if you own the AP you're going to have quite a bit of visibility, but that might not even be necessary...

Firesheep: Easy HTTP session hijacking from within Firefox

http://news.ycombinator.com/item?id=1827928

http://en.wikipedia.org/wiki/Firesheep