And on the reverse side, OS fingerprinting by the packets you receive: https://lcamtuf.coredump.cx/p0f3/