The DNS query traffic from the inside and the outside of the campus network in a university was statistically investigated through January 1st, to July 31st, 2007. The following interesting results are obtained, as follows: (1) The unique source IP address-based entropy value is usually less than the unique DNS query keyword based one in the DNS query traffic from the campus network, however, the unique source IP address-based entropy value is greater than the unique DNS query keyword based one in the DNS query traffic from the outside of the campus network. (2) Two types of entropy changes were found in the unique source IP addresses- and the unique DNS resolution query keywords. In the both entropies, one is a parallel change, and another one is a symmetrical one. Although the latter change type can be conventionally observed in 2006, the former change type can recently observed in 2007. Therefore, it can be concluded that the recent spam bots send a lot of spam E-mails to the next victim PCs via the local vulnerable E-mail servers.