* [Sean Neakums] > AFAIR, they use the "Server:" header in the HTTP response to determine > the OS of the server, rather than fingerprinting the TCP/IP stack. > But I could be wrong. They use something they call "passive tcp fingerprinting". I don't know exactly what that implies. The Server header is not used for OS detection, at least not for Linux. Oystein -- This message was brought to you by the letter ß and the number e.