Measuring botnet populations