diff --git a/CHANGELOG b/CHANGELOG
index 5786924c4..3473a6c4d 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,8 +1,113 @@
 # Nmap Changelog ($Id$); -*-text-*-
 
+Nmap 4.77BETA
+
+o Added Ncat, a much-improved reimplementation of the venerable Netcat
+  tool which adds modern features and makes use of Nmap's efficient
+  networking libraries.  Features include SSL support, proxy
+  connections (client or server, socks4 or connect-based, with or
+  without authentication, optionally chained), TCP or UDP connection
+  redirection, connection brokering (facilitating connections between
+  machines which are behind NAT gateways), and much more.  It is
+  cross-platform (Linux, Windows, Mac, etc.) and supports IPv6 as well
+  as standard IPv4.  See http://nmap.org/ncat/ for details.
+
+o Added the Ndiff utility, which compares the results of Nmap scans.
+  This makes it trivial to scan your networks on a regular basis and
+  create a report (XML or text format) listing the new/removed hosts,
+  newly open/closed ports, changed operating systems, etc.  See
+  http://nmap.org/ndiff/ and ndiff/README for more
+  information. [David]
+
+o Added three new nselib modules: msrpc, netbios, and smb. As the
+  names suggest, they contain common code for scripts using MSRPC,
+  NetBIOS, and SMB. These modules allow scripts to extract a great
+  deal of information from hosts running Windows, particularly Windows
+  2000. New or updated scripts using the modules are:
+    nbstat.nse: get NetBIOS names and MAC address.
+    smb-enumdomains.nse: enumerate domains and policies.
+    smb-enumsessions.nse: enumerate logins and SMB sessions.
+    smb-enumshares.nse: enumerate network shares.
+    smb-enumusers.nse: enumerate users and information about them.
+    smb-os-discovery.nse: get operating system over SMB (replaces
+      netbios-smb-os-discovery.nse).
+    smb-security-mode.nse: determine if a host uses user-level or
+      share-level security, and what other security features it
+      supports.
+    smb-serverstats.nse: grab statistics such as network traffic
+      counts.
+    smb-systeminfo.nse: get lots of information from the registry.
+  [Ron Bowes]
+
+o Added smb-enum-processes.nse, a script that allows a user with administrator
+  credentials to view a tree of the processes running on the remote system
+  (uses HKEY_PERFORMANCE_DATA hive). [Ron Bowes]
+
+o A problem that caused OS detection to fail for most hosts in a
+  certain case was fixed. It happened when sending raw Ethernet frames
+  (by default on Windows or on other platforms with --send-eth) to
+  hosts on a switched LAN. The destination MAC address was wrong for
+  most targets. The symptom was that only one out of each scan group
+  of 20 or 30 hosts would have a meaningful OS fingerprint. Thanks go
+  to Michael Head for running tests and especially Trent Snyder for
+  testing and finding the cause of the problem. [David]
+
+o Zenmap no longer outputs XML elements and attributes that are not in
+  the Nmap XML DTD. This was done mostly by removing things from
+  Zenmap's output, and adding a few new optional things to the Nmap
+  DTD. A scan's profile name, host comments, and interactive text
+  output are what were added to nmap.dtd. The .usr filename extension
+  for saved Zenmap files is deprecated in favor of the .xml extension
+  commonly used with Nmap. Because of these changes the
+  xmloutputversion has been increased to 1.03. [David]
+
+o Enhanced the AS Numbers script (ASN.nse) to better consolidate
+  results and bail out if the DNS server doesn't support the ASN
+  queries. [Jah]
+
+o Complete re-write of the marshalling logic for Microsoft RPC calls. 
+  [Ron Bowes]
+
+o Added vulnerability checks for MS08-067 as well as an unfixed 
+  denial of service in the Windows 2000 registry service.
+  [Ron Bowes]
+
+o Added a script that checks for ms08-067-vulnerable hosts 
+  (smb-check-vulns.nse) using the smb nselib. [Ron Bowes]
+
+o Added a Russian translation of the Nmap Reference Guide by Guz
+  Alexander. We now have translations in 15 languages available from
+  http://nmap.org/docs.html. More volunteer translaters are welcome,
+  as we are still missing some important languages (particularly
+  German!). Translation instructions are available from that docs.html
+  page.
+
+o Zenmap now runs ndiff to do its "Compare Results" function. This
+  completely replaces the old diff view. ndiff is now required to do
+  comparisons in Zenmap. [David]
+
 o Update Windows installer to handle Windows 7 (tested with the Beta
   build 7000) [Rob Nicholls]
 
+o The Windows installer now uses Zenmap binaries built using Python
+  2.6.1 rather than 2.5.1.
+
+o When a system route can't be matched up directly with an interface
+  by comparing addresses, Nmap now tries to match the route through
+  another route. This helps for instance with a PPP connection where
+  the default route's gateway address is routed through a different
+  route, the one associated with the address of the PPP device. The
+  problem would show itself as an inability to scan through the
+  default route and the error message
+    WARNING: Unable to find appropriate interface for system route to ...
+  [David]
+
+o Most script names were changed to make them more consistent.
+  [Fyodor, David]
+
+o NSE prints messages in debugging mode whenever a script starts or
+  finishes [Patrick, David].
+
 o Nmap now reports a proper error message when you combine an IPv6
   scan (-6) with random IPv4 address selection (-iR). [Henri Doreau]
 
@@ -18,86 +123,44 @@ o Nsock handles a certain Windows connect error, WSAEADDRNOTAVAIL
   broadcast address. Thanks to Tilo Köppe and James Liu for reporting
   the problem. [David]
 
-o NSE prints messages in debugging mode whenever a script starts or
-  finishes [Patrick, David].
+o Added a new NSE OpenSSL library with functions for multiprecision
+  integer arithmetics, hashing, HMAC, symmetric encryption and symmetric
+  decryption. [Sven]
 
 o An "elapsed" attribute has been added to the XML output, representing
   the total scan time in seconds (floating point). [Kris]
 
-o When a system route can't be matched up directly with an interface
-  by comparing addresses, Nmap now tries to match the route through
-  another route. This helps for instance with a PPP connection where
-  the default route's gateway address is routed through a different
-  route, the one associated with the address of the PPP device. The
-  problem would show itself as an inability to scan through the
-  default route and the error message
-    WARNING: Unable to find appropriate interface for system route to ...
-  [David]
-
-o Added smb-enum-processes.nse, a script that allows a user with administrator
-  credentials to view a tree of the processes running on the remote system
-  (uses HKEY_PERFORMANCE_DATA hive). [Ron Bowes]
-
-o A problem that caused OS detection to fail for most hosts in a
-  certain was fixed. It happened when sending raw Ethernet frames
-  (by default on Windows or on other platforms with --send-eth) to
-  hosts on a switched LAN. The destination MAC address was wrong for
-  most targets. The symptom was that only one out of each scan group
-  of 20 or 30 hosts would have a meaningful OS fingerprint. Thanks go
-  to Michael Head for running tests and especially Trent Snyder for
-  testing and finding the cause of the problem. [David]
-
 o Fixed a division by zero error in the packet rate measuring code
   that could cause a display of infinity packets per seconds near the
   start of a scan. [Jah]
 
-o Complete re-write of the marshalling logic for Microsoft RPC calls. 
-  [Ron Bowes]
-
-o Added vulnerability checks for MS08-067 as well as an unfixed 
-  denial of service in the Windows 2000 registry service.
-  [Ron Bowes]
-
-o Zenmap now runs ndiff to do its "Compare Results" function. This
-  completely replaces the old diff view. ndiff is now required to do
-  comparisons in Zenmap. [David]
-
 o Fixed a bug in the IP validation code which would have let a specially
   crafted reply sent from a host on the same LAN slip through and cause
   Nmap to segfault.  Thanks to ithilgore of sock-raw.homeunix.org for
   the very detailed bug report. [Kris]
 
-o [Zenmap] The crash reporter is more respectful of user privacy. It
-  shows all the information that will be submitted so you can edit it
-  to remove identifying information such as the name of your home
-  directory. If you provide an email address the report will be marked
-  private so it will not appear on the public bug tracker. [David]
+o [Zenmap] The crash reporter now enhances user privacy by showing all
+  the information that will be submitted so you can edit it to remove
+  identifying information such as the name of your home directory. If
+  you provide an email address the report will be marked private so it
+  will not appear on the public bug tracker. [David]
 
 o [Zenmap] Internationalization has been fixed [David]. Currently
   Zenmap has two translations:
-    German by Chris Leick
-    Brazilian Portuguese by Adriano Monteiro Marques (partial)
+    o German by Chris Leick
+    o Brazilian Portuguese by Adriano Monteiro Marques (partial)
 
-o [NSE] host.os table is now properly a 1 based array (was 0). [Patrick]
+o [NSE] host.os table is now a 1-based array (was 0). [Patrick]
 
 o [Zenmap] Zenmap now parses and records XSL stylesheet information
   from Nmap XML files, so files saved by Zenmap will be viewable in a
   web browser just like those produced by Nmap. [David]
 
-o A possible Lua stack overflow in dns.lua was fixed. [David]
+o A possible Lua stack overflow in dns.lua was fixed. Lua detects
+  these sorts of overflows and quits. [David]
 
 o The NSE registry now persists across host groups. [David]
 
-o Added a script that checks for ms08-067-vulnerable hosts 
-  (smb-check-vulns.nse) using the smb nselib. [Ron Bowes]
-
-o Added a Russian translation of the Nmap Reference Guide by Guz
-  Alexander. We now have translations in 15 languages available from
-  http://nmap.org/docs.html. More volunteer translaters are welcome,
-  as we are still missing some important languages (particularly
-  German!). Translation instructions are available from that docs.html
-  page.
-
 o [Zenmap] Added a workaround for a crash
     GtkWarning: could not open display
   on Mac OS X 10.5. The problem is caused by setting the DISPLAY
@@ -113,9 +176,6 @@ o http-auth.nse now properly checks for default authentication
 o Renamed irc-zombie.nse to auth-spoof and improved its description
   and output a bit. [Fyodor]
 
-o Most script names were changed to make them more consistent.
-  [Fyodor, David]
-
 o Removed ripeQuery.nse because we now have the much more robust
   whois.nse which handles all the major registries. [Fyodor]
 
@@ -153,17 +213,13 @@ o [Zenmap] The keyboard shortcut for "Save to Directory" has been
   changed from Ctrl+v to Ctrl+Alt+s so as not to conflict with the
   usual paste shortcut [Jah, Michael].
 
-o Nmap quits if you give a "backwards" port or protocol range like
+o Nmap now quits if you give a "backwards" port or protocol range like
   -p 20-10. The issue was noted by Arturo "Buanzo" Busleiman. [David]
 
 o Fixed a bug which caused Nmap to infer an improper distance against
   some hosts when performaing OS detection against a group whose
   distance varies between members. [David, Fyodor]
 
-o Added a new NSE OpenSSL library with functions for multiprecision
-  integer arithmetics, hashing, HMAC, symmetric encryption and symmetric
-  decryption. [Sven]
-
 o [Zenmap] Host information windows are now like any other windows,
   and will not become unclosable by having their controls offscreen.
   Thanks to Robert Mead for the bug report.
@@ -186,16 +242,16 @@ o [Zenmap] The help function now properly converts the pathname of the
   WindowsError: [Error 2] The system cannot find the file specified:
   'file://C:\\Program Files\\Nmap\\zenmap\\share\\zenmap\\docs\\help.html'
 
-o The HTTP_open_proxy.nse script is updated to match Google Web
+o The HTTP_open_proxy.nse script was updated to match Google Web
   Server's changed header field: "Server: gws" instead of
   "Server: GWS/".  [Vlatko Kosturjak]
 
 o Enhanced the ssh service detection signatures to properly
   detect protocol version 2 services. [Matt Selsky]
 
-o [Zenmap] Nmap output is automatically scrolled. [David]
+o [Zenmap] The Nmap output window now scrolls automatically. [David]
 
-o Reduced memory consumption for some longer running scans by removing
+o Reduced memory consumption for some longer-running scans by removing
   completed hosts from the lists after two minutes.  These hosts are
   kept around in case there is a late response, but this draws the
   line on how long we wait and hence keep this information in memory.
@@ -205,64 +261,30 @@ o XML output now contains the full path to nmap.xml on Windows. The
   path is converted to a file:// URL to provide better compatibility
   across browsers. [Jah]
 
-o Zenmap no longer outputs XML elements and attributes that are not in
-  the Nmap XML DTD. This was done mostly by removing things from
-  Zenmap's output, and adding a few new optional things to the Nmap
-  DTD. A scan's profile name, host comments, and interactive text
-  output are what were added to nmap.dtd. The .usr filename extension
-  for saved Zenmap files is deprecated in favor of the .xml extension
-  commonly used with Nmap. Because of these changes the
-  xmloutputversion has been increased to 1.03. [David]
-
-o Added the Ndiff utility, which compares the results of Nmap scans.
-  See ndiff/README and http://nmap.org/ndiff/ for more
-  information. [David]
-
 o Fixed an integer overflow that could cause the scan delay to grow
   large for no reason in some circumstances. [David]
 
-o Enhanced the AS Numbers script (ASN.nse) to better consolidate
-  results and bail out if the DNS server doesn't support the ASN
-  queries. [Jah]
-
 o Made DNS timeouts in NSE dependent on the timing template [Jah]
 
-o Added three new nselib modules: msrpc, netbios, and smb. As the
-  names suggest, they contain common code for scripts using MSRPC,
-  NetBIOS, and SMB. These modules allow scripts to extract a great
-  deal of information from hosts running Windows, particularly Windows
-  2000. New or updated scripts using the modules are:
-    nbstat.nse: get NetBIOS names and MAC address.
-    smb-enumdomains.nse: enumerate domains and policies.
-    smb-enumsessions.nse: enumerate logins and SMB sessions.
-    smb-enumshares.nse: enumerate network shares.
-    smb-enumusers.nse: enumerate users and information about them.
-    smb-os-discovery.nse: get operating system over SMB (replaces
-      netbios-smb-os-discovery.nse).
-    smb-security-mode.nse: determine if a host uses user-level or
-      share-level security, and what other security features it
-      supports.
-    smb-serverstats.nse: grab statistics such as network traffic
-      counts.
-    smb-systeminfo.nse: get lots of information from the registry.
-  [Ron Bowes]
-
 o A script could be executed twice if it was given with the --script
   option, also in the "version" category, and version detection (-sV)
   was requested. This has been fixed. [David]
 
-o Fixed port number representation in some of Nmap's and all of Nsock's
-  output.  Incorrect conversion modifiers were being used which caused
-  high ports to wrap around and be shown as negative values. [Kris]
+o Fixed port number representation in some Nmap and Nsock message
+  output.  Incorrect conversion modifiers caused high ports to wrap
+  around and be shown as negative values. [Kris]
 
-o Upgraded the shipped libdnet to 1.12. [Kris]
+o Upgraded the shipped libdnet library to version 1.12 (with our
+  modifications). [Kris]
 
-o Upgraded the OpenSSL shipped for Windows to 0.9.8i. [Kris]
+o Upgraded the OpenSSL binaries shipped in our Windows installer to
+  version 0.9.8i. [Kris]
 
 o The SSLv2-support NSE script no longer prints duplicate cyphers if
   they exist in the server's supported cypher list. [Kris]
 
-o The robots.txt NSE script is now silent instead of printing "is empty
+o The robots.txt NSE script is now silent when there are no
+  interesting results, rather than printing that robots.txt "is empty
   or has no disallowed entries". [Kris]
 
 o Updated IANA assignment IP list for random IP (-iR)
diff --git a/docs/nmap.1 b/docs/nmap.1
index 0528d355e..80234e6f2 100644
--- a/docs/nmap.1
+++ b/docs/nmap.1
@@ -1,12 +1,12 @@
 .\"     Title: nmap
 .\"    Author: Gordon \(lqFyodor\(rq Lyon
 .\" Generator: DocBook XSL Stylesheets v1.74.0 <http://docbook.sf.net/>
-.\"      Date: 12/08/2008
+.\"      Date: 01/22/2009
 .\"    Manual: Nmap Reference Guide
 .\"    Source: Nmap First Edition
 .\"  Language: English
 .\"
-.TH "NMAP" "1" "12/08/2008" "Nmap First Edition" "Nmap Reference Guide"
+.TH "NMAP" "1" "01/22/2009" "Nmap First Edition" "Nmap Reference Guide"
 .\" -----------------------------------------------------------------
 .\" * (re)Define some macros
 .\" -----------------------------------------------------------------
@@ -277,7 +277,7 @@ This options summary is printed when Nmap is run with no arguments, and the late
 .ps -1
 .nf
 .BB lightgray
-Nmap 4\&.76 ( http://nmap\&.org )
+Nmap 4\&.77BETA ( http://nmap\&.org )
 Usage: nmap [Scan Type(s)] [Options] {target specification}
 TARGET SPECIFICATION:
   Can pass hostnames, IP addresses, networks, etc\&.
@@ -290,12 +290,13 @@ HOST DISCOVERY:
   \-sL: List Scan \- simply list targets to scan
   \-sP: Ping Scan \- go no further than determining if host is online
   \-PN: Treat all hosts as online \-\- skip host discovery
-  \-PS/PA/PU [portlist]: TCP SYN/ACK or UDP discovery to given ports
+  \-PS/PA/PU[portlist]: TCP SYN/ACK or UDP discovery to given ports
   \-PE/PP/PM: ICMP echo, timestamp, and netmask request discovery probes
-  \-PO [protocol list]: IP Protocol Ping
+  \-PO[protocol list]: IP Protocol Ping
   \-n/\-R: Never do DNS resolution/Always resolve [default: sometimes]
   \-\-dns\-servers <serv1[,serv2],\&.\&.\&.>: Specify custom DNS servers
   \-\-system\-dns: Use OS\'s DNS resolver
+  \-\-traceroute: Trace hop path to each host
 SCAN TECHNIQUES:
   \-sS/sT/sA/sW/sM: TCP SYN/Connect()/ACK/Window/Maimon scans
   \-sU: UDP Scan
@@ -304,8 +305,6 @@ SCAN TECHNIQUES:
   \-sI <zombie host[:probeport]>: Idle scan
   \-sO: IP protocol scan
   \-b <FTP relay host>: FTP bounce scan
-  \-\-traceroute: Trace hop path to each host
-  \-\-reason: Display the reason a port is in a particular state
 PORT SPECIFICATION AND SCAN ORDER:
   \-p <port ranges>: Only scan specified ports
     Ex: \-p22; \-p1\-65535; \-p U:53,111,137,T:21\-25,80,139,8080
@@ -333,7 +332,7 @@ OS DETECTION:
 TIMING AND PERFORMANCE:
   Options which take <time> are in milliseconds, unless you append \'s\'
   (seconds), \'m\' (minutes), or \'h\' (hours) to the value (e\&.g\&. 30m)\&.
-  \-T[0\-5]: Set timing template (higher is faster)
+  \-T<0\-5>: Set timing template (higher is faster)
   \-\-min\-hostgroup/max\-hostgroup <size>: Parallel host scan group sizes
   \-\-min\-parallelism/max\-parallelism <time>: Probe parallelization
   \-\-min\-rtt\-timeout/max\-rtt\-timeout/initial\-rtt\-timeout <time>: Specifies
@@ -360,6 +359,7 @@ OUTPUT:
   \-oA <basename>: Output in the three major formats at once
   \-v: Increase verbosity level (use twice or more for greater effect)
   \-d[level]: Set or increase debugging level (Up to 9 is meaningful)
+  \-\-reason: Display the reason a port is in a particular state
   \-\-open: Only show open (or possibly open) ports
   \-\-packet\-trace: Show all packets sent and received
   \-\-iflist: Print host interfaces and routes (for debugging)
@@ -989,9 +989,7 @@ This vulnerability was widespread in 1997 when Nmap was released, but has largel
 .SH "Port Specification and Scan Order"
 .\" port specification
 .PP
-In addition to all of the scan methods discussed previously, Nmap offers options for specifying which ports are scanned and whether the scan order is randomized or sequential\&. By default, Nmap scans all ports up to and including 1024 as well as higher numbered ports listed in the
-\FCnmap\-services\F[]
-file for the protocol(s) being scanned\&.
+In addition to all of the scan methods discussed previously, Nmap offers options for specifying which ports are scanned and whether the scan order is randomized or sequential\&. By default, Nmap scans the most common 1,000 ports for each protocol\&.
 .\" default ports
 .PP
 \fB\-p \fR\fB\fIport ranges\fR\fR (Only scan specified ports) .\" -p
@@ -1000,14 +998,14 @@ This option specifies which ports you want to scan and overrides the default\&.
 \FC1\-1023\F[])\&. The beginning and/or end values of a range may be omitted, causing Nmap to use 1 and 65535, respectively\&. So you can specify
 \fB\-p\-\fR
 to scan ports from 1 through 65535\&. Scanning port zero.\" port zero
-is allowed if you specify it explicitly\&. For IP protocol scanning (\fB\-sO\fR), this option specifies the protocol numbers you wish to scan for (0\-255)\&.
+is allowed if you specify it explicitly\&. For IP protocol scanning (\fB\-sO\fR), this option specifies the protocol numbers you wish to scan for (0\(en255)\&.
 .sp
 When scanning both TCP and UDP ports, you can specify a particular protocol by preceding the port numbers by
 \FCT:\F[]
 or
 \FCU:\F[]\&. The qualifier lasts until you specify another qualifier\&. For example, the argument
 \fB\-p U:53,111,137,T:21\-25,80,139,8080\fR
-would scan UDP ports 53,111,and 137, as well as the listed TCP ports\&. Note that to scan both UDP and TCP, you have to specify
+would scan UDP ports 53, 111,and 137, as well as the listed TCP ports\&. Note that to scan both UDP and TCP, you have to specify
 \fB\-sU\fR
 and at least one TCP scan type (such as
 \fB\-sS\fR,
@@ -1057,9 +1055,7 @@ for sequential port scanning instead\&.
 .\" --port-ratio
 Scans all ports in
 \FCnmap\-services\F[]
-file with a ratio greater than the number specified as the argument\&. (new format
-\FCnmap\-services\F[]
-only\&.)
+file with a ratio greater than the number specified as the argument\&.
 .RE
 .PP
 \fB\-\-top\-ports <integer of 1 or greater>\fR
@@ -1067,9 +1063,7 @@ only\&.)
 .\" --top-ports
 Scans the N highest\-ratio ports found in
 \FCnmap\-services\F[]
-file\&. (new format
-\FCnmap\-services\F[]
-only\&.)
+file\&.
 .RE
 .SH "Service and Version Detection"
 .\" version detection
@@ -1255,7 +1249,7 @@ Runs a script scan (like
 \FC$NMAPDIR/\F[];.\" NMAPDIR environment variable
 \FC~/\&.nmap/\F[]
 (not searched on Windows);.\" .nmap directory
-NMAPDATADIR/ or.\" NMAPDATADIR
+\FCNMAPDATADIR\F[]/ or.\" NMAPDATADIR
 \FC\&./\F[]\&. A
 \FCscripts/\F[]
 subdirectory is also tried in each of these\&.
diff --git a/docs/nmap.usage.txt b/docs/nmap.usage.txt
index de60e1337..bcdfaa254 100644
--- a/docs/nmap.usage.txt
+++ b/docs/nmap.usage.txt
@@ -1,4 +1,4 @@
-Nmap 4.76 ( http://nmap.org )
+Nmap 4.77BETA ( http://nmap.org )
 Usage: nmap [Scan Type(s)] [Options] {target specification}
 TARGET SPECIFICATION:
   Can pass hostnames, IP addresses, networks, etc.
@@ -11,12 +11,13 @@ HOST DISCOVERY:
   -sL: List Scan - simply list targets to scan
   -sP: Ping Scan - go no further than determining if host is online
   -PN: Treat all hosts as online -- skip host discovery
-  -PS/PA/PU [portlist]: TCP SYN/ACK or UDP discovery to given ports
+  -PS/PA/PU[portlist]: TCP SYN/ACK or UDP discovery to given ports
   -PE/PP/PM: ICMP echo, timestamp, and netmask request discovery probes
-  -PO [protocol list]: IP Protocol Ping
+  -PO[protocol list]: IP Protocol Ping
   -n/-R: Never do DNS resolution/Always resolve [default: sometimes]
   --dns-servers <serv1[,serv2],...>: Specify custom DNS servers
   --system-dns: Use OS's DNS resolver
+  --traceroute: Trace hop path to each host
 SCAN TECHNIQUES:
   -sS/sT/sA/sW/sM: TCP SYN/Connect()/ACK/Window/Maimon scans
   -sU: UDP Scan
@@ -25,8 +26,6 @@ SCAN TECHNIQUES:
   -sI <zombie host[:probeport]>: Idle scan
   -sO: IP protocol scan
   -b <FTP relay host>: FTP bounce scan
-  --traceroute: Trace hop path to each host
-  --reason: Display the reason a port is in a particular state
 PORT SPECIFICATION AND SCAN ORDER:
   -p <port ranges>: Only scan specified ports
     Ex: -p22; -p1-65535; -p U:53,111,137,T:21-25,80,139,8080
@@ -54,7 +53,7 @@ OS DETECTION:
 TIMING AND PERFORMANCE:
   Options which take <time> are in milliseconds, unless you append 's'
   (seconds), 'm' (minutes), or 'h' (hours) to the value (e.g. 30m).
-  -T[0-5]: Set timing template (higher is faster)
+  -T<0-5>: Set timing template (higher is faster)
   --min-hostgroup/max-hostgroup <size>: Parallel host scan group sizes
   --min-parallelism/max-parallelism <time>: Probe parallelization
   --min-rtt-timeout/max-rtt-timeout/initial-rtt-timeout <time>: Specifies
@@ -81,6 +80,7 @@ OUTPUT:
   -oA <basename>: Output in the three major formats at once
   -v: Increase verbosity level (use twice or more for greater effect)
   -d[level]: Set or increase debugging level (Up to 9 is meaningful)
+  --reason: Display the reason a port is in a particular state
   --open: Only show open (or possibly open) ports
   --packet-trace: Show all packets sent and received
   --iflist: Print host interfaces and routes (for debugging)
diff --git a/docs/zenmap.1 b/docs/zenmap.1
index aea8428fb..edcf73af5 100644
--- a/docs/zenmap.1
+++ b/docs/zenmap.1
@@ -1,12 +1,12 @@
 .\"     Title: zenmap
 .\"    Author: [see the "Authors" section]
 .\" Generator: DocBook XSL Stylesheets v1.74.0 <http://docbook.sf.net/>
-.\"      Date: 12/08/2008
+.\"      Date: 01/22/2009
 .\"    Manual: Zenmap Reference Guide
 .\"    Source: Zenmap
 .\"  Language: English
 .\"
-.TH "ZENMAP" "1" "12/08/2008" "Zenmap" "Zenmap Reference Guide"
+.TH "ZENMAP" "1" "01/22/2009" "Zenmap" "Zenmap Reference Guide"
 .\" -----------------------------------------------------------------
 .\" * (re)Define some macros
 .\" -----------------------------------------------------------------
diff --git a/nmap.h b/nmap.h
index a823fe971..645309bbe 100644
--- a/nmap.h
+++ b/nmap.h
@@ -256,8 +256,8 @@ void *realloc();
 #ifndef NMAP_VERSION
 /* Edit this definition only within the quotes, because it is read from this
    file by the makefiles. */
-#define NMAP_VERSION "4.76"
-#define NMAP_NUM_VERSION "4.76.0.0"
+#define NMAP_VERSION "4.77BETA"
+#define NMAP_NUM_VERSION "4.77.0.0"
 #endif
 
 /* User configurable #defines: */