TCP finger printing

http://www.insecure.org/nmap/nmap-fingerprinting-article.html
http://project.honeynet.org/papers/finger/
http://budi.insan.co.id/courses/el7010/2003/report-ta.pdf
http://www.giac.org/practical/GSEC/Charles_Hamby_GSEC.pdf