III. bogus queries 


(evi nemeth, caida/sailboat; andre/ken/duane, caida)
 
misuse of root servers
root servers receive a large amount of invalid queries

possible classification:
stupid (e.g. lookup the IP address of an IP address)
invalid TLD (i.e. "foo.ntdomain")
repeat queries for the same data (new meaning to `persistent software')

our goals:
identify clients that do not cache referrals
would more consistent caching reduce load significantly?
determine the nature of high load clients
misconfigured name server installations?
unknown DNS implementations?
viruses?
suggest possible fixes to reduce the load