From 93cb0fd4b5cd7c36604589577f788218e4932041 Mon Sep 17 00:00:00 2001
From: dmiller <dmiller@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Mon, 7 Aug 2017 15:51:28 +0000
Subject: [PATCH] Document the '*all' host discovery syntax

---
 docs/refguide.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/docs/refguide.xml b/docs/refguide.xml
index 2279b6d5a..68b3b50a2 100644
--- a/docs/refguide.xml
+++ b/docs/refguide.xml
@@ -164,6 +164,16 @@ manual.  Some obscure options aren't even included here.</para>
 option argument) is treated as a target host specification.  The
 simplest case is to specify a target IP address or hostname for scanning.</para>
 
+<para>When a hostname is given as a target, it is
+  <firstterm>resolved</firstterm><indexterm><primary>DNS resolution</primary></indexterm>
+  via the Domain Name System (DNS) to determine the IP address to scan. If the
+  name resolves to more than one IP address, only the first one will be
+  scanned. To make Nmap scan all the resolved addresses instead of only the
+  first one, append <literal>*all</literal>
+  <indexterm><primary>*all</primary></indexterm> to the hostname like so:
+  <literal>example.com*all</literal>
+</para>
+
 <para>Sometimes you wish to scan a whole network of adjacent hosts. For
 this, Nmap supports CIDR-style<indexterm><primary>CIDR (Classless
 Inter-Domain Routing)</primary></indexterm> addressing.  You can append