II. BIND behavior analysis - future plans continue collection and characterization of log files interarrival rates popularity (some names are more popular than others) correlations between popularity and TTLs message sizes response codes duplicate queries invalid queries percentage of caching/non-caching clients develop simulating software run controlled experiments `icmp as indicator of dns' calibration (again)