Analyzing regular DNS operations