Added an OS fingerprinting switch and was able to at least have the six probe packets sendable, with their 110 ms spacing. I need to do a deep dive into the match points that nmap uses to interpret the responses. Goal is to interpret the SEQ,OPS,WIN, and T1 lines.