IP graph Nodes: IP addresses Links: pairs of IP addresses TTL distance 1 Observed in a skitter path Nonresponding hops changed to IP contexts No attempt to remove bogus addresses Graph is directed