Measuring High Availability