diff --git a/docs/refguide.xml b/docs/refguide.xml index ae494d1ea..76f860db3 100644 --- a/docs/refguide.xml +++ b/docs/refguide.xml @@ -1577,19 +1577,21 @@ way. - Specifies that you only wish to scan - for ports listed in the nmap-services - file which comes with Nmap (or the protocols file for - ). This is much faster than scanning all 65535 ports on a - host. Because this list contains so many TCP ports (more - than 1200), the speed difference from a default TCP scan - (about 1650 ports) isn't dramatic. The difference can be - enormous if you specify your own tiny - nmap-services file using the - - or - options. - + Specifies that you wish to scan fewer ports than the + default. Normally Nmaps scans the most common 1,000 ports for + each scanned protocol. With , this is + reduced to 100. + + Nmap needs an nmap-services file + with frequency information in order to know which ports are + the most + common (see + for more about port frequencies). If port frequency + information isn't available, perhaps because of the use of a + custom nmap-services file, + means to scan only ports that are named in + the services file (normally Nmap scans all named ports plus + ports 1–1024).