@VeeDub: According to a Tech republic writeup (posted by another user in reply to a comment earlier than yours), Firesheep only works on open and WEP encrypted networks, not WPA/2. It can get any session id that is not passed over a secure conenction (such as https, vpn, ssh tunnel, etc.)