I believe you can use nmap to determine various information regarding a nodes status? From what I understand, different OS's handle the TCP/IP stack differently.. so depending on certain criteria: TTL, DF bitset, etc, you can determine the target's OS, etc. I highly doubt your ISP will bother...