1）在192.168.88.55上安裝rh9，內核版本爲<?xml:namespace prefix = st1 ns = "urn:schemas-microsoft-com:office:smarttags" />2.4.20-8，下載http://download.insecure.org/nmap/dist/nmap-3.30-1.i386.rpm。執行rpm -Uvh nmap-3.30-1.i386.rpm安裝。
2）在服務器端執行：
nmap –sP 192.168.88.50<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />
結果：
Starting nmap 3.30 ( http://www.insecure.org/nmap/ ) at 2003-09-16 11:18 CST
Note: Host seems down. If it is really up, but blocking our ping probes, try -P0
Nmap run completed -- 1 IP address (0 hosts up) scanned in 12.046 seconds
執行：nmap –sT 192.168.88.50
結果：
Starting nmap 3.30 ( http://www.insecure.org/nmap/ ) at 2003-09-16 11:21 CST
Interesting ports on 192.168.88.50:
(The 1638 ports scanned but not shown below are in state: closed)
Port State Service
80/tcp open http
135/tcp open loc-srv
139/tcp open netbios-ssn
1025/tcp open NFS-or-IIS
1433/tcp open ms-sql-s
3372/tcp open msdtc
Nmap run completed -- 1 IP address (1 host up) scanned in 0.449 seconds
執行：nmap -sU 192.168.88.50
結果：
Starting nmap 3.30 ( http://www.insecure.org/nmap/ ) at 2003-09-16 11:21 CST
Interesting ports on 192.168.88.50:
(The 1467 ports scanned but not shown below are in state: closed)
Port State Service
135/udp open loc-srv
137/udp open netbios-ns
138/udp open netbios-dgm
1434/udp open ms-sql-m
Nmap run completed -- 1 IP address (1 host up) scanned in 6.175 seconds