2.2.4 Tribe Flood Network (TFN)

A Tribal Flood Network (TFN) attack occurs when a TFN master station sends out a command to a list of TFN servers (or daemons) to initiate a DoS attack. The TFN network has the ability to generate packets with spoofed IP addresses for the source. On command, the daemons generate the specified DoS attack against the listed targets. To make the attack more widespread, the spoofed source IP address and source ports can be randomized. To evade detection, the packet sizes can be altered.