II. investigating/modeling BIND: measurements CAIDA dnsstat utility passive measurements at the root servers collects aggregated statistics of queries: source address number of queries type of queries does not record query subjects can run for days without a problem