Folks from ISC are working on some tools to detect attacks of this type. I encourage anyone interested in learning more (or to discuss the situation in general) to join our jabber room named dns-operations at conference.dns-oarc.net. Duane W.