例題一：掃瞄單一部電腦！
[root@test root]# nmap localhost　　
# 沒有加上任何參數，由 nmap 的預設參數來進行掃瞄
Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ )
Interesting ports on vbird.adsldns.org (127.0.0.1):
(The 1539 ports scanned but not shown below are in state: closed)
Port       State       Service
21/tcp     open        ftp
22/tcp     open        ssh
23/tcp     open        telnet
Nmap run completed -- 1 IP address (1 host up) scanned in 1 second
# 由上面可以看出我的系統目前共有 21, 22, 23 這三個 port 開放！而且
# 各 port 對應的服務也被查出來了！

例題二：掃瞄單一部電腦的較少數 port 號碼！
[root@test root]# nmap -p 1024-65535 localhost
# 僅掃瞄較少數的 port 啦！
Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ )
Interesting ports on pc510.ev.ncku.edu.tw (127.0.0.1):
(The 64511 ports scanned but not shown below are in state: closed)
Port       State       Service
3306/tcp   open        mysql <==只有這個 port 被找出來囉！
Nmap run completed -- 1 IP address (1 host up) scanned in 11 seconds

例題三：直接以 Ping 的方式掃瞄數個電腦！
[root @test /root]# nmap -PT 192.168.1.171-177 
# 看到了吧！掃瞄一個區段的活著的電腦！

Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/ )
Interesting ports on linux172 (192.168.1.172):
(The 1536 ports scanned but not shown below are in state: closed)
Port       State       Service
110/tcp    open        pop-3
135/tcp    open        loc-srv
139/tcp    open        netbios-ssn
445/tcp    open        microsoft-ds
1025/tcp   open        listen
1110/tcp   open        nfsd-status

Interesting ports on linux174 (192.168.1.174):
(The 1537 ports scanned but not shown below are in state: closed)
Port       State       Service
110/tcp    open        pop-3
135/tcp    open        loc-srv
139/tcp    open        netbios-ssn
445/tcp    open        microsoft-ds
1025/tcp   open        listen

Interesting ports on linux176 (192.168.1.176):
(The 1537 ports scanned but not shown below are in state: closed)
Port       State       Service
110/tcp    open        pop-3
135/tcp    open        loc-srv
139/tcp    open        netbios-ssn
445/tcp    open        microsoft-ds
1025/tcp   open        listen

Nmap run completed -- 7 IP addresses (3 hosts up) scanned in 1 second
瞧！我要偵測的只有七部電腦，所以這七部電腦只會回應給我囉！而其中只有三部有啟動，所以當然就只會有三段回應啦！這個方式蠻適合一次掃瞄您的子網域內的所有電腦呢！ ^_^"

2. 重新開機讓設定生效：
[root@test root]# reboot

3. 觀察目前的 port 開啟多少個？
[root@test root]# netstat -an | more
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  7      [ ]         DGRAM                    944    /dev/log
unix  2      [ ]         DGRAM                    3162963
unix  2      [ ]         DGRAM                    739227
unix  2      [ ]         DGRAM                    739189
unix  2      [ ]         DGRAM                    1070
unix  2      [ ]         DGRAM                    953
unix  2      [ ]         STREAM     CONNECTED     690