dig.docbook revision 1124950b35ae05a12e804e670607fe5ba775cb4a
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
885f47576842cf3c569315b9a48bd9f0ca03f203Automatic Updater "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater [<!ENTITY mdash "—">]>
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater - Copyright (C) 2004-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater - Copyright (C) 2000-2003 Internet Software Consortium.
75b70a68aefaa17ac4e768d5ed85d2f50d471490Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater - purpose with or without fee is hereby granted, provided that the above
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater - copyright notice and this permission notice appear in all copies.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
56874aef380a64a2c183b7c282c3e7a361d67fa1Automatic Updater - PERFORMANCE OF THIS SOFTWARE.
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews<!-- $Id: dig.docbook,v 1.51 2011/11/04 11:02:50 jreed Exp $ -->
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater <refentryinfo>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </refentryinfo>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <refnamediv>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <refpurpose>DNS lookup utility</refpurpose>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </refnamediv>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews </copyright>
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater <refsynopsisdiv>
723bfc0fc28c486c805de016c4475a35328eb8abAutomatic Updater <arg><option>-b <replaceable class="parameter">address</replaceable></option></arg>
723bfc0fc28c486c805de016c4475a35328eb8abAutomatic Updater <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <arg><option>-f <replaceable class="parameter">filename</replaceable></option></arg>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <arg><option>-k <replaceable class="parameter">filename</replaceable></option></arg>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <arg><option>-p <replaceable class="parameter">port#</replaceable></option></arg>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <arg><option>-q <replaceable class="parameter">name</replaceable></option></arg>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <arg><option>-t <replaceable class="parameter">type</replaceable></option></arg>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <arg><option>-x <replaceable class="parameter">addr</replaceable></option></arg>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <arg><option>-y <replaceable class="parameter"><optional>hmac:</optional>name:key</replaceable></option></arg>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <arg choice="opt" rep="repeat">queryopt</arg>
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews </cmdsynopsis>
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater </cmdsynopsis>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <arg choice="opt" rep="repeat">global-queryopt</arg>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews </cmdsynopsis>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson </refsynopsisdiv>
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater (domain information groper) is a flexible tool
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater for interrogating DNS name servers. It performs DNS lookups and
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater displays the answers that are returned from the name server(s) that
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater were queried. Most DNS administrators use <command>dig</command> to
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater troubleshoot DNS problems because of its flexibility, ease of use and
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater clarity of output. Other lookup tools tend to have less functionality
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater Although <command>dig</command> is normally used with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater arguments, it also has a batch mode of operation for reading lookup
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater requests from a file. A brief summary of its command-line arguments
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and options is printed when the <option>-h</option> option is given.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Unlike earlier versions, the BIND 9 implementation of
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater <command>dig</command> allows multiple lookups to be issued
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Unless it is told to query a specific name server,
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater <command>dig</command> will try each of the servers listed in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <filename>/etc/resolv.conf</filename>. If no usable server addresses
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater are found, <command>dig</command> will send the query to the local
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater When no command line arguments or options are given,
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater <command>dig</command> will perform an NS query for "." (the root).
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater It is possible to set per-user defaults for <command>dig</command> via
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <filename>${HOME}/.digrc</filename>. This file is read and
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater any options in it
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater are applied before the command line arguments.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The IN and CH class names overlap with the IN and CH top level
bbb069be941f649228760edcc241122933c066d2Automatic Updater domain names. Either use the <option>-t</option> and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <option>-c</option> options to specify the type and class,
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater use the <option>-q</option> the specify the domain name, or
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews use "IN." and "CH." when looking up these top level domains.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews A typical invocation of <command>dig</command> looks like:
c5a53da13bb2126dcbbd5b45ca4904eccafe6621Automatic Updater <programlisting> dig @server name type </programlisting>
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater <variablelist>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington is the name or IP address of the name server to query. This
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater can be an IPv4 address in dotted-decimal notation or an IPv6
7eda3642eea03f1181e41540c7c8791a57759383Automatic Updater address in colon-delimited notation. When the supplied
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater <parameter>server</parameter> argument is a hostname,
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater <command>dig</command> resolves that name before querying
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater that name server.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson If no <parameter>server</parameter> argument is
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <filename>/etc/resolv.conf</filename>; if an
5c0fc20d6e59216d9a142409e5fdb498153aeaa5Automatic Updater address is found there, it queries the name server at
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater that address. If either of the <option>-4</option> or
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater <option>-6</option> options are in use, then
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington only addresses for the corresponding transport
f0ecd0e64ffa2a8afef95d81275d46a845f15402Automatic Updater will be tried. If no usable addresses are found,
3857cb6fcabeb79d85de4b3e3e4ab99912b701f8Mark Andrews <command>dig</command> will send the query to the
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater local host. The reply from the name server that
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater responds is displayed.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
3c5dffc581c882235485cf5eaf7cd6a5e07548bfAutomatic Updater is the name of the resource record that is to be looked up.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews indicates what type of query is required —
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews ANY, A, MX, SIG, etc.
e076d0c88be69de7c190ab924d095e69d2e11f7aAndreas Gustafsson <parameter>type</parameter> can be any valid query
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>type</parameter> argument is supplied,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <command>dig</command> will perform a lookup for an
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews </varlistentry>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews </variablelist>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The <option>-b</option> option sets the source IP address of the query
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to <parameter>address</parameter>. This must be a valid
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater one of the host's network interfaces or "0.0.0.0" or "::". An optional
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater may be specified by appending "#<port>"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The default query class (IN for internet) is overridden by the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>-c</option> option. <parameter>class</parameter> is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington class, such as HS for Hesiod records or CH for Chaosnet records.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The <option>-f</option> option makes <command>dig </command>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington in batch mode by reading a list of lookup requests to process from the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington file <parameter>filename</parameter>. The file contains a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington queries, one per line. Each entry in the file should be organized in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the same way they would be presented as queries to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <command>dig</command> using the command-line interface.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The <option>-m</option> option enables memory usage debugging.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <!-- It enables ISC_MEM_DEBUGTRACE and ISC_MEM_DEBUGRECORD
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington documented in include/isc/mem.h -->
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington If a non-standard port number is to be queried, the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>-p</option> option is used. <parameter>port#</parameter> is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the port number that <command>dig</command> will send its
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington instead of the standard DNS port number 53. This option would be used
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to test a name server that has been configured to listen for queries
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington on a non-standard port number.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The <option>-4</option> option forces <command>dig</command>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington use IPv4 query transport. The <option>-6</option> option forces
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <command>dig</command> to only use IPv6 query transport.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The <option>-t</option> option sets the query type to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <parameter>type</parameter>. It can be any valid query type
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington supported in BIND 9. The default query type is "A", unless the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <option>-x</option> option is supplied to indicate a reverse lookup.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington A zone transfer can be requested by specifying a type of AXFR. When
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington an incremental zone transfer (IXFR) is required,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <parameter>type</parameter> is set to <literal>ixfr=N</literal>.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The incremental zone transfer will contain the changes made to the zone
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater since the serial number in the zone's SOA record was
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington The <option>-q</option> option sets the query name to
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington <parameter>name</parameter>. This is useful to distinguish the
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <parameter>name</parameter> from other arguments.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington Reverse lookups — mapping addresses to names — are simplified by the
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <option>-x</option> option. <parameter>addr</parameter> is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington address in dotted-decimal notation, or a colon-delimited IPv6 address.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater When this option is used, there is no need to provide the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>name</parameter>, <parameter>class</parameter> and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <parameter>type</parameter> arguments. <command>dig</command>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington automatically performs a lookup for a name like
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <literal>11.12.13.10.in-addr.arpa</literal> and sets the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington query type and
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater class to PTR and IN respectively. By default, IPv6 addresses are
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater looked up using nibble format under the IP6.ARPA domain.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater To use the older RFC1886 method using the IP6.INT domain
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater specify the <option>-i</option> option. Bit string labels (RFC2874)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater are now experimental and are not attempted.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater To sign the DNS queries sent by <command>dig</command> and
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater responses using transaction signatures (TSIG), specify a TSIG key file
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater using the <option>-k</option> option. You can also specify the TSIG
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater key itself on the command line using the <option>-y</option> option;
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>hmac</parameter> is the type of the TSIG, default HMAC-MD5,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>name</parameter> is the name of the TSIG key and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>key</parameter> is the actual key. The key is a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington encoded string, typically generated by
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <citerefentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </citerefentry>.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Caution should be taken when using the <option>-y</option> option on
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington multi-user systems as the key can be visible in the output from
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <citerefentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <refentrytitle>ps</refentrytitle><manvolnum>1</manvolnum>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </citerefentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington or in the shell's history file. When
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington using TSIG authentication with <command>dig</command>, the name
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington server that is queried needs to know the key and algorithm that is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington being used. In BIND, this is done by providing appropriate
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <command>key</command> and <command>server</command> statements in
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater provides a number of query options which affect
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the way in which lookups are made and the results displayed. Some of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington these set or reset flag bits in the query header, some determine which
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater sections of the answer get printed, and others determine the timeout
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater and retry strategies.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Each query option is identified by a keyword preceded by a plus sign
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (<literal>+</literal>). Some keywords set or reset an
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington option. These may be preceded
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews by the string <literal>no</literal> to negate the meaning of
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews that keyword. Other
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington keywords assign values to options like the timeout interval. They
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington have the form <option>+keyword=value</option>.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The query options are:
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <variablelist>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Use [do not use] TCP when querying name servers. The default
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington behavior is to use UDP unless an AXFR or IXFR query is
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews requested, in
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews which case a TCP connection is used.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Use [do not use] TCP when querying name servers. This alternate
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington syntax to <parameter>+[no]tcp</parameter> is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington provided for backwards
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington compatibility. The "vc" stands for "virtual circuit".
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Ignore truncation in UDP responses instead of retrying with TCP.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater default, TCP retries are performed.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+domain=somename</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Set the search list to contain the single domain
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <parameter>somename</parameter>, as if specified in
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews <filename>/etc/resolv.conf</filename>, and enable
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews processing as if the <parameter>+search</parameter>
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews option were given.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Use [do not use] the search list defined by the searchlist or
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington directive in <filename>resolv.conf</filename> (if
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The search list is not used by default.
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]showsearch</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Perform [do not perform] a search showing intermediate
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater </varlistentry>
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]defname</option></term>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater Deprecated, treated as a synonym for <parameter>+[no]search</parameter>
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater </varlistentry>
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Sets the "aa" flag in the query.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater A synonym for <parameter>+[no]aaonly</parameter>.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Set [do not set] the AD (authentic data) bit in the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater query. This requests the server to return whether
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater all of the answer and authority sections have all
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater been validated as secure according to the security
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater policy of the server. AD=1 indicates that all records
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater have been validated as secure and the answer is not
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater from a OPT-OUT range. AD=0 indicate that some part
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of the answer was insecure or not validated. This
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater bit is set by default.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Set [do not set] the CD (checking disabled) bit in the query.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater requests the server to not perform DNSSEC validation of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Display [do not display] the CLASS when printing the record.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Display [do not display] the TTL when printing the record.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]recurse</option></term>
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews Toggle the setting of the RD (recursion desired) bit
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater in the query. This bit is set by default, which means
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <command>dig</command> normally sends recursive
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington queries. Recursion is automatically disabled when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>+trace</parameter> query options are used.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]nssearch</option></term>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater When this option is set, <command>dig</command>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater attempts to find the
2da2220fe7af2c45724b50b0187523b1fab0cf08Rob Austein authoritative name servers for the zone containing the name
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington looked up and display the SOA record that each name server has
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater </varlistentry>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <varlistentry>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater Toggle tracing of the delegation path from the root
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater name servers for the name being looked up. Tracing
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater is disabled by default. When tracing is enabled,
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <command>dig</command> makes iterative queries to
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater resolve the name being looked up. It will follow
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater referrals from the root servers, showing the answer
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater from each server that was used to resolve the lookup.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <command>+dnssec</command> is also set when +trace is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington set to better emulate the default queries from a nameserver.
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater </varlistentry>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater <varlistentry>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater Toggles the printing of the initial comment in the output
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the version of <command>dig</command> and the query
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington options that have
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater been applied. This comment is printed by default.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Provide a terse answer. The default is to print the answer in a
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term><option>+[no]identify</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Show [or do not show] the IP address and port number that
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater answer when the <parameter>+short</parameter> option
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is enabled. If
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater short form answers are requested, the default is not to show the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater source address and port number of the server that provided the
f8c47598b87a5eb5ff2ceda6c81d136212d59cefAutomatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]comments</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Toggle the display of comment lines in the output. The default
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is to print comments.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <term><option>+[no]rrcomments</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Toggle the display of per-record comments in the output (for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater example, human-readable key information about DNSKEY records).
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The default is not to print record comments unless multiline
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington mode is active.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
e062b72f783cdb436a1a57a630bdff471dbb3038Mark Andrews Toggle the display of cryptographic fields in DNSSEC records.
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater The contents of these field are unnecessary to debug most DNSSEC
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater validation failures and removing them makes it easier to see
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the common failures. The default is to display the fields.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater When omitted they are replaced by the string "[omitted]" or
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater in the DNSKEY case the key id is displayed as the replacement,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater e.g. "[ key id = value ]".
e076d0c88be69de7c190ab924d095e69d2e11f7aAndreas Gustafsson </varlistentry>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Split long hex- or base64-formatted fields in resource
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater records into chunks of <parameter>W</parameter> characters
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (where <parameter>W</parameter> is rounded up to the nearest
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater multiple of 4).
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>+split=0</parameter> causes fields not to be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater split at all. The default is 56 characters, or 44 characters
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when multiline mode is active.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater This query option toggles the printing of statistics: when the
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater was made, the size of the reply and so on. The default
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to print the query statistics.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <varlistentry>
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater Print [do not print] the query as it is sent.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington By default, the query is not printed.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]question</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Print [do not print] the question section of a query when an
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater returned. The default is to print the question section as a
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater </varlistentry>
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Display [do not display] the answer section of a reply. The
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is to display it.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
f65d2e1c04c806a185bf9f3120e80692f5ccd5e6Automatic Updater <term><option>+[no]authority</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Display [do not display] the authority section of a reply. The
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater default is to display it.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews </varlistentry>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews <varlistentry>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews Display [do not display] the additional section of a reply.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews The default is to display it.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews </varlistentry>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews <varlistentry>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews Set or clear all display flags.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews </varlistentry>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Sets the timeout for a query to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>T</parameter> seconds. The default
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater timeout is 5 seconds.
af3e516f771c8ba376a8cd954a7233badfce8cdcAutomatic Updater An attempt to set <parameter>T</parameter> to less
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater than 1 will result
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in a query timeout of 1 second being applied.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater Sets the number of times to try UDP queries to server to
f55369d776907119cd8699a4119d9c80daa7cae4Mark Andrews <parameter>T</parameter> instead of the default, 3.
f55369d776907119cd8699a4119d9c80daa7cae4Mark Andrews <parameter>T</parameter> is less than or equal to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater zero, the number of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington tries is silently rounded up to 1.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Sets the number of times to retry UDP queries to server to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>T</parameter> instead of the default, 2.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>+tries</parameter>, this does not include
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater Set the number of dots that have to appear in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>name</parameter> to <parameter>D</parameter> for it to be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater considered absolute. The default value is that defined using
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ndots statement in <filename>/etc/resolv.conf</filename>, or 1 if no
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ndots statement is present. Names with fewer dots are
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater interpreted as
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater relative names and will be searched for in the domains listed in
bbf7c3fd96ae5e02cb84743c581862e35327032aAutomatic Updater <option>search</option> or <option>domain</option> directive in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Set the UDP message buffer size advertised using EDNS0 to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <parameter>B</parameter> bytes. The maximum and minimum sizes
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of this buffer are 65535 and 0 respectively. Values outside
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater this range are rounded up or down appropriately.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Values other than zero will cause a EDNS query to be sent.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Specify the EDNS version to query with. Valid values
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington are 0 to 255. Setting the EDNS version will cause
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington a EDNS query to be sent. <option>+noedns</option>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington clears the remembered EDNS version. EDNS is set to
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater </varlistentry>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]multiline</option></term>
8227257b1c0224a7991e04bb79dc5059d5062dfbAndreas Gustafsson Print records like the SOA records in a verbose multi-line
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater format with human-readable comments. The default is to print
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater each record on a single line, to facilitate machine parsing
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
8227257b1c0224a7991e04bb79dc5059d5062dfbAndreas Gustafsson <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Print only one (starting) SOA record when performing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington an AXFR. The default is to print both the starting and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ending SOA records.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Do not try the next server if you receive a SERVFAIL. The
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to not try the next server which is the reverse of normal stub
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]besteffort</option></term>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Attempt to display the contents of messages which are malformed.
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater The default is to not display malformed answers.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Requests DNSSEC records be sent by setting the DNSSEC OK bit
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in the OPT record in the additional section of the query.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]sigchase</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Chase DNSSEC signature chains. Requires dig be compiled with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater -DDIG_SIGCHASE.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater <varlistentry>
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater <term><option>+trusted-key=####</option></term>
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater Specifies a file containing trusted keys to be used with
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater <option>+sigchase</option>. Each DNSKEY record must be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater on its own line.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington If not specified, <command>dig</command> will look for
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <filename>/etc/trusted-key.key</filename> then
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <filename>trusted-key.key</filename> in the current directory.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Requires dig be compiled with -DDIG_SIGCHASE.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater </varlistentry>
d912d1139efa8410785f0fc88dfb7dc7fbaae6deMark Andrews <varlistentry>
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater <term><option>+[no]topdown</option></term>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater When chasing DNSSEC signature chains perform a top-down
3341c8b653577f2f0cb8b72702ea6197035334ffMark Andrews Requires dig be compiled with -DDIG_SIGCHASE.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson </varlistentry>
d912d1139efa8410785f0fc88dfb7dc7fbaae6deMark Andrews <varlistentry>
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews Include an EDNS name server ID request when sending a query.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater </varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <varlistentry>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <term><option>+[no]keepopen</option></term>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Keep the TCP socket open between queries and reuse it rather
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews than creating a new TCP socket for each lookup. The default
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews </varlistentry>
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews </variablelist>
10b4a0c3a4eec1b22b990c0a0595fbda51f54e94Automatic Updater The BIND 9 implementation of <command>dig </command>
4f5257ba7afbe06e949d1577581de18b22ef6c05Automatic Updater specifying multiple queries on the command line (in addition to
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews supporting the <option>-f</option> batch file option). Each of those
b795291f8ea5bc2c8470cc34f82e8c570337308aAutomatic Updater queries can be supplied with its own set of flags, options and query
bf1263835e8e35421960f65088c043f42aacef13Mark Andrews In this case, each <parameter>query</parameter> argument
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews represent an
21f8d40dbd9be951555f46b0bfa23571c5a9b913Automatic Updater individual query in the command-line syntax described above. Each
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews consists of any of the standard options and flags, the name to be
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews looked up, an optional query type and class and any query options that
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews should be applied to that query.
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews A global set of query options, which should be applied to all queries,
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews can also be supplied. These global query options must precede the
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews first tuple of name, class, type, options, flags, and query options
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews supplied on the command line. Any global query options (except
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews overridden by a query-specific set of query options. For example:
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews <programlisting>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrewsdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews</programlisting>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews shows how <command>dig</command> could be used from the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews command line
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to make three lookups: an ANY query for <literal>www.isc.org</literal>, a
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews reverse lookup of 127.0.0.1 and a query for the NS records of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews A global query option of <parameter>+qr</parameter> is
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews that <command>dig</command> shows the initial query it made
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews lookup. The final query has a local query option of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <parameter>+noqr</parameter> which means that <command>dig</command>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews will not print the initial query when it looks up the NS records for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews If <command>dig</command> has been built with IDN (internationalized
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews domain name) support, it can accept and display non-ASCII domain names.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <command>dig</command> appropriately converts character encoding of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews domain name before sending a request to DNS server or displaying a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews reply from the server.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews If you'd like to turn off the IDN support for some reason, defines
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the <envar>IDN_DISABLE</envar> environment variable.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews The IDN support is disabled if the variable is set when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <refentrytitle>host</refentrytitle><manvolnum>1</manvolnum>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews </citerefentry>,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <citerefentry>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews </citerefentry>,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <citerefentry>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews </citerefentry>,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews There are probably too many query options.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - Local variables:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - mode: sgml