¨Requires the attacker to specify IP address of the packet-filtering device and IP address of destination machine ¨Sends packets with incrementally higher TTL values until ICMP Time Exceed message is received from packet-filtering device