diff --git a/docs/scripting.xml b/docs/scripting.xml
index 5e993b175..c90a6711b 100644
--- a/docs/scripting.xml
+++ b/docs/scripting.xml
@@ -137,38 +137,41 @@ The reference manual is also
next to that port in the Nmap output port table. Host scripts,
on the other hand, run no more than once against each target IP
and produce results below the port table. shows a typical script scan. Examples of
- service scripts producing output are:
- sshv1, saying that SSH-1 is supported;
- and html-title,
- which simply grabs the title of the root path of any web servers
- found. A sample host script is ripeQuery,
- which looks up and reports target IP ownership
- information.script names, examples of
+ linkend="nse-ex1" xrefstyle="select: label nopage"/> shows a
+ typical script scan. Service scripts producing
+ output in this example are
+ ssh-hostkey, which provides the system's RSA and DSA SSH keys, and rpcinfo, which queries
+ portmapper to enumerate available services. The only host
+ script producing output in this example
+ is smb-os-discovery, which collects a variety of
+ information from SMB servers.script names, examples
+ of Nmap discovered all of this information in a third of a second.
-
-
- Typical NSE output
-example of
+Typical NSE outputexample of
-$ nmap -sC localhost -p 22,23,80,113
+# nmap -sC -p22,111,139 -T4 localhost
Starting Nmap ( http://nmap.org )
-Interesting ports on localhost (127.0.0.1):
-PORT STATE SERVICE
-22/tcp open ssh
-|_ sshv1: Server supports SSHv1
-23/tcp closed telnet
-80/tcp open http
-|_ html-title: Test Page for Apache Installation
-113/tcp closed auth
+Interesting ports on flog (127.0.0.1):
+PORT STATE SERVICE
+22/tcp open ssh
+| ssh-hostkey: 1024 b1:36:0d:3f:50:dc:13:96:b2:6e:34:39:0d:9b:1a:38 (DSA)
+|_ 2048 77:d0:20:1c:44:1f:87:a0:30:aa:85:cf:e8:ca:4c:11 (RSA)
+111/tcp open rpcbind
+| rpcinfo:
+| 100000 2,3,4 111/udp rpcbind
+| 100024 1 56454/udp status
+|_ 100000 2,3,4 111/tcp rpcbind
+139/tcp open netbios-ssn
Host script results:
-|_ ripeQuery: IP belongs to: Internet Assigned Numbers Authority
+| smb-os-discovery: Unix
+| LAN Manager: Samba 3.0.31-0.fc8
+|_ Name: WORKGROUP
-Nmap done: 1 IP address (1 host up) scanned in 0.91 seconds
+Nmap done: 1 IP address (1 host up) scanned in 0.33 seconds
-
+