[Opendnssec-develop] How to recognise Kaminsky's attack?

[Rick van Rein]

Hi,

This is somewhat contextual around OpenDNSSEC:

A while back I've seen a network traffic analysis that indicated how
the Kaminsky attack had its own indications in traffic patterns.
I cannot find it back, and I wonder if any of you has seen it as well.

I would appreciate a link or a gist of the patterns.

Thanks,
 -Rick