hi everybody,

here is an interesting paper about passive fingerprinting and how it works:
fingerprinting

and something about ttl default values from different os
ttl

download nmap and get more knowledge:
nmap

cheers,