From 99627d06429872f3116f48c5cbce8fd0445b0f01 Mon Sep 17 00:00:00 2001
From: fyodor <fyodor@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Wed, 3 Oct 2007 19:42:38 +0000
Subject: [PATCH] note that -P0 still does arp scan in some cases

---
 docs/refguide.xml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/docs/refguide.xml b/docs/refguide.xml
index 5356dd358..683f952c8 100644
--- a/docs/refguide.xml
+++ b/docs/refguide.xml
@@ -431,7 +431,11 @@ you would expect.</para>
           zero and not the letter O.  Proper host discovery is skipped
           as with the list scan, but instead of stopping and printing
           the target list, Nmap continues to perform requested
-          functions as if each target IP is active.</para>
+          functions as if each target IP is active.  For machines on a
+          local ethernet network, ARP scanning will still be performed
+          (unless <options>--send-ip</option> is specified) because
+          Nmap needs MAC addressses to further scan target
+          hosts.</para>
         </listitem>
       </varlistentry>