How does netcraft detect OS?

I understand Apache leaks the name of server via ServerToken. But I can not find a way how netcraft detect the OS which the server is running on. From ping maybe?

 

 

 

 

Top