Understanding Spammers

Passive fingerprinting to identify operating systems.
Identification happens on TCP SYN packet.
43% of spam is sent from Linux machines.