Comment by fragmede

Did you run any advanced TCP fingerprinting techniques to dig a bit deeper?