dig.docbook revision 01d9a393ec3f8ab4065de4319684a9254dcd6f21
fb84f9014321c5f33c4682de5661b579fcde318fAndreas Gustafsson<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN">
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews - Copyright (C) 2000, 2001 Internet Software Consortium.
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater - Permission to use, copy, modify, and distribute this software for any
fb84f9014321c5f33c4682de5661b579fcde318fAndreas Gustafsson - purpose with or without fee is hereby granted, provided that the above
fb84f9014321c5f33c4682de5661b579fcde318fAndreas Gustafsson - copyright notice and this permission notice appear in all copies.
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT,
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
af5073d03288a53b646ec3b807ac25ced64d7879Mark Andrews - NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
fb84f9014321c5f33c4682de5661b579fcde318fAndreas Gustafsson - WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<!-- $Id: dig.docbook,v 1.3 2001/06/18 20:20:46 gson Exp $ -->
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<refentryinfo>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews</refentryinfo>
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User<refsynopsisdiv>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<cmdsynopsis>
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User<arg><option>-b <replaceable class="parameter">address</replaceable></option></arg>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<arg><option>-f <replaceable class="parameter">filename</replaceable></option></arg>
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User<arg><option>-k <replaceable class="parameter">filename</replaceable></option></arg>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<arg><option>-p <replaceable class="parameter">port#</replaceable></option></arg>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<arg><option>-t <replaceable class="parameter">type</replaceable></option></arg>
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User<arg><option>-x <replaceable class="parameter">addr</replaceable></option></arg>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<arg><option>-y <replaceable class="parameter">name:key</replaceable></option></arg>
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User</cmdsynopsis>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<cmdsynopsis>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</cmdsynopsis>
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox User<arg choice=opt rep=repeat>global-queryopt</arg>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</cmdsynopsis>
b49958b502ee45022010a0b1bed3968f598895a4Automatic Updater</refsynopsisdiv>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<command>dig</command> (domain information groper) is a flexible tool
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinfor interrogating DNS name servers. It performs DNS lookups and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeindisplays the answers that are returned from the name server(s) that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinwere queried. Most DNS administrators use <command>dig</command> to
b3cbb2f1ad021349e89807f3492df6e4e679cd56Mark Andrewstroubleshoot DNS problems because of its flexibility, ease of use and
b3cbb2f1ad021349e89807f3492df6e4e679cd56Mark Andrewsclarity of output. Other lookup tools tend to have less functionality
b3cbb2f1ad021349e89807f3492df6e4e679cd56Mark AndrewsAlthough <command>dig</command> is normally used with command-line
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinarguments, it also has a batch mode of operation for reading lookup
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox Userrequests from a file. A brief summary of its command-line arguments
b46346eb3026ba4bebc093bc93cfe159131e541eTinderbox Userand options is printed when the <option>-h</option> option is given.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinUnlike earlier versions, the BIND9 implementation of
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User<command>dig</command> allows multiple lookups to be issued from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeincommand line.
61e1dc26d62c2a0059e3ca7efe2ad0f4a5b8df92Mark AndrewsUnless it is told to query a specific name server,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<command>dig</command> will try each of the servers listed in
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox UserWhen no command line arguments or options are given, will perform an
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox UserNS query for "." (the root).
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox UserA typical invocation of <command>dig</command> looks like:
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox User<programlisting> dig @server name type </programlisting> where:
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox User<variablelist>
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox User<varlistentry><term><constant>server</constant></term>
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox Useris the name or IP address of the name server to query. An IPv4
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox Useraddress can be provided in dotted-decimal notation. When the supplied
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox User<parameter>server</parameter> argument is a hostname,
d8620c7234281056fdfd2ee40cf16636b8281092Tinderbox User<command>dig</command> resolves that name before querying that name
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinserver. If no <parameter>server</parameter> argument is provided,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<command>dig</command> consults <filename>/etc/resolv.conf</filename>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinand queries the name servers listed there. The reply from the name
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinserver that responds is displayed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<varlistentry><term><constant>name</constant></term>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinis the name of the resource record that is to be looked up.
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User<varlistentry><term><constant>type</constant></term>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinindicates what type of query is required —
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinANY, A, MX, SIG, etc.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<parameter>type</parameter> can be any valid query type. If no
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<parameter>type</parameter> argument is supplied,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<command>dig</command> will perform a lookup for an A record.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</variablelist>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinThe <option>-b</option> option sets the source IP address of the query
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinto <parameter>address</parameter>. This must be a valid address on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinone of the host's network interfaces.
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox UserThe default query class (IN for internet) is overridden by the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<option>-c</option> option. <parameter>class</parameter> is any valid
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinclass, such as HS for Hesiod records or CH for CHAOSNET records.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinThe <option>-f</option> option makes <command>dig </command> operate
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox Userin batch mode by reading a list of lookup requests to process from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinfile <parameter>filename</parameter>. The file contains a number of
1c09d68dfd18b6e839c8cd68b78c11b3ccca4160Automatic Updaterqueries, one per line. Each entry in the file should be organised in
1c09d68dfd18b6e839c8cd68b78c11b3ccca4160Automatic Updaterthe same way they would be presented as queries to
1c09d68dfd18b6e839c8cd68b78c11b3ccca4160Automatic Updater<command>dig</command> using the command-line interface.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinIf a non-standard port number is to be queried, the
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User<option>-p</option> option is used. <parameter>port#</parameter> is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinthe port number that <command>dig</command> will send its queries
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeininstead of the standard DNS port number 53. This option would be used
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinto test a name server that has been configured to listen for queries
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinon a non-standard port number.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinThe <option>-t</option> option sets the query type to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<parameter>type</parameter>. It can be any valid query type which is
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox Usersupported in BIND9. The default query type "A", unless the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<option>-x</option> option is supplied to indicate a reverse lookup.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinA zone transfer can be requested by specifying a type of AXFR. When
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinan incremental zone transfer (IXFR) is required,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<parameter>type</parameter> is set to <literal>ixfr=N</literal>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinThe incremental zone transfer will contain the changes made to the zone
f6da30bb5447c23d880b09f601441e70c5313557Mark Andrewssince the serial number in the zone's SOA record was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinReverse lookups - mapping addresses to names - are simplified by the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<option>-x</option> option. <parameter>addr</parameter> is an IPv4
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinaddress in dotted-decimal notation, or a colon-delimited IPv6 address.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinWhen this option is used, there is no need to provide the
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews<parameter>name</parameter>, <parameter>class</parameter> and
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews<parameter>type</parameter> arguments. <command>dig</command>
665a24faf6b3711e4012ac02ae5f0981c093ac1eTinderbox Userautomatically performs a lookup for a name like
8c9957e63274e6ea44d182703116307b1a65dabbMark Andrews<literal>11.12.13.10.in-addr.arpa</literal> and sets the query type and
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrewsclass to PTR and IN respectively. By default, IPv6 addresses are
b46346eb3026ba4bebc093bc93cfe159131e541eTinderbox Userlooked up using the IP6.ARPA domain and binary labels as defined in
b46346eb3026ba4bebc093bc93cfe159131e541eTinderbox UserRFC2874. To use the older RFC1886 method using the IP6.INT domain and
b46346eb3026ba4bebc093bc93cfe159131e541eTinderbox User"nibble" labels, specify the <option>-n</option> (nibble) option.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinTo sign the DNS queries sent by <command>dig</command> and their
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinresponses using transaction signatures (TSIG), specify a TSIG key file
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinusing the <option>-k</option> option. You can also specify the TSIG
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinkey itself on the command line using the <option>-y</option> option;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<parameter>name</parameter> is the name of the TSIG key and
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox User<parameter>key</parameter> is the actual key. The key is a base-64
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinencoded string, typically generated by <citerefentry>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</citerefentry>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinCaution should be taken when using the <option>-y</option> option on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinmulti-user systems as the key can be visible in the output from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<citerefentry> <refentrytitle>ps</refentrytitle><manvolnum>1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</manvolnum> </citerefentry> or in the shell's history file. When
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinusing TSIG authentication with <command>dig</command>, the name
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinserver that is queried needs to know the key and algorithm that is
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox Userbeing used. In BIND, this is done by providing appropriate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<command>key</command> and <command>server</command> statements in
61e1dc26d62c2a0059e3ca7efe2ad0f4a5b8df92Mark Andrews<command>dig</command> provides a number of query options which affect
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinthe way in which lookups are made and the results displayed. Some of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinthese set or reset flag bits in the query header, some determine which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinsections of the answer get printed, and others determine the timeout
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinand retry strategies.
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox UserEach query option is identified by a keyword preceded by a plus sign
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein(<literal>+</literal>). Some keywords set or reset an option. These may be preceded
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinby the string <literal>no</literal> to negate the meaning of that keyword. Other
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinkeywords assign values to options like the timeout interval. They
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox Userhave the form <option>+keyword=value</option>.
b46346eb3026ba4bebc093bc93cfe159131e541eTinderbox UserThe query options are:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<variablelist>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<varlistentry><term><option>+[no]tcp</option></term>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinUse [do not use] TCP when querying name servers. The default
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinbehaviour is to use UDP unless an AXFR or IXFR query is requested, in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinwhich case a TCP connection is used.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<varlistentry><term><option>+[no]vc</option></term>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinUse [do not use] TCP when querying name servers. This alternate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinsyntax to <parameter>+[no]tcp</parameter> is provided for backwards
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeincompatibility. The "vc" stands for "virtual circuit".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<varlistentry><term><option>+[no]ignore</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserIgnore truncation in UDP responses instead of retrying with TCP. By
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeindefault, TCP retries are performed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<varlistentry><term><option>+domain=somename</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserSet the search list to contain the single domain
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<parameter>somename</parameter>, as if specified in a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<filename>/etc/resolv.conf</filename>, and enable search list
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userprocessing as if the <parameter>+search</parameter> option were given.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<varlistentry><term><option>+[no]search</option></term>
370c55dfcdc559b8761ef3eb4921498580caf14cAutomatic UpdaterUse [do not use] the search list defined by the searchlist or domain
370c55dfcdc559b8761ef3eb4921498580caf14cAutomatic Updaterdirective in <filename>resolv.conf</filename> (if any).
370c55dfcdc559b8761ef3eb4921498580caf14cAutomatic UpdaterThe search list is not used by default.
370c55dfcdc559b8761ef3eb4921498580caf14cAutomatic Updater<varlistentry><term><option>+[no]defname</option></term>
77dccf2a5d9327d16b4374a135cdb99bdd48620eAutomatic UpdaterDeprecated, treated as a synonym for <parameter>+[no]search</parameter>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]aaonly</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserThis option does nothing. It is provided for compatibilty with old
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userversions of <command>dig</command> where it set an unimplemented
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userresolver flag.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]adflag</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserSet [do not set] the AD (authentic data) bit in the query. The AD bit
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usercurrently has a standard meaning only in responses, not in queries,
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userbut the ability to set the bit in the query is provided for
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]cdflag</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserSet [do not set] the CD (checking disabled) bit in the query. This
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userrequests the server to not perform DNSSEC validation of responses.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]recursive</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserToggle the setting of the RD (recursion desired) bit in the query.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserThis bit is set by default, which means <command>dig</command>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usernormally sends recursive queries. Recursion is automatically disabled
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<parameter>+trace</parameter> query options are used.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<varlistentry><term><option>+[no]nssearch</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserWhen this option is set, <command>dig</command> attempts to find the
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userauthoritative name servers for the zone containing the name being
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userlooked up and display the SOA record that each name server has for the
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]trace</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserToggle tracing of the delegation path from the root name servers for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinthe name being looked up. Tracing is disabled by default. When
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usertracing is enabled, <command>dig</command> makes iterative queries to
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userresolve the name being looked up. It will follow referrals from the
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userroot servers, showing the answer from each server that was used to
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userresolve the lookup.
e68c527dff2f1f7df2a542f8d6f9181a27e05eb7Tinderbox User<varlistentry><term><option>+[no]cmd</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usertoggles the printing of the initial comment in the output identifying
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userthe version of <command>dig</command> and the query options that have
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userbeen applied. This comment is printed by default.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]short</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserProvide a terse answer. The default is to print the answer in a
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]identify</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserShow [or do not show] the IP address and port number that supplied the
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Useranswer when the <parameter>+short</parameter> option is enabled. If
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usershort form answers are requested, the default is not to show the
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usersource address and port number of the server that provided the answer.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]comments</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserToggle the display of comment lines in the output. The default is to
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userprint comments.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]stats</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserThis query option toggles the printing of statistics: when the query
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userwas made, the size of the reply and so on. The default behaviour is
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userto print the query statistics.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]qr</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserPrint [do not print] the query as it is sent.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserBy default, the query is not printed.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]question</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserPrint [do not print] the question section of a query when an answer is
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userreturned. The default is to print the question section as a comment.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]answer</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserDisplay [do not display] the answer section of a reply. The default
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Useris to display it.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]authority</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserDisplay [do not display] the authority section of a reply. The
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userdefault is to display it.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]additional</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserDisplay [do not display] the additional section of a reply.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserThe default is to display it.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]all</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserSet or clear all display flags.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+time=T</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserSets the timeout for a query to
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<parameter>T</parameter> seconds. The default time out is 5 seconds.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserAn attempt to set <parameter>T</parameter> to less than 1 will result
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userin a query timeout of 1 second being applied.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+tries=A</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserSets the number of times to retry UDP queries to server to
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<parameter>T</parameter> instead of the default, 3. If
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<parameter>T</parameter> is less than or equal to zero, the number of
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userretries is silently rounded up to 1.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+ndots=D</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserSet the number of dots that have to appear in
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<parameter>name</parameter> to <parameter>D</parameter> for it to be
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userconsidered absolute. The default value is that defined using the
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userndots statement in <filename>/etc/resolv.conf</filename>, or 1 if no
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userndots statement is present. Names with fewer dots are interpreted as
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userrelative names and will be searched for in the domains listed in the
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<option>search</option> or <option>domain</option> directive in
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+bufsize=B</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserSet the UDP message buffer size advertised using EDNS0 to
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<parameter>B</parameter> bytes. The maximum and minimum sizes of this
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userbuffer are 65535 and 0 respectively. Values outside this range are
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userrounded up or down appropriately.
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<varlistentry><term><option>+[no]multiline</option></term>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserPrint records like the SOA records in a verbose multi-line
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userformat with human-readable comments. The default is to print
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usereach record on a single line, to facilitate machine parsing
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User</variablelist>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserThe BIND 9 implementation of <command>dig </command> supports
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userspecifying multiple queries on the command line (in addition to
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usersupporting the <option>-f</option> batch file option). Each of those
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userqueries can be supplied with its own set of flags, options and query
77dccf2a5d9327d16b4374a135cdb99bdd48620eAutomatic UpdaterIn this case, each <parameter>query</parameter> argument represent an
77dccf2a5d9327d16b4374a135cdb99bdd48620eAutomatic Updaterindividual query in the command-line syntax described above. Each
3afd0ff6628df1e7e20161e4afa99469a1195a5bTinderbox Userconsists of any of the standard options and flags, the name to be
77dccf2a5d9327d16b4374a135cdb99bdd48620eAutomatic Updaterlooked up, an optional query type and class and any query options that
77dccf2a5d9327d16b4374a135cdb99bdd48620eAutomatic Updatershould be applied to that query.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob AusteinA global set of query options, which should be applied to all queries,
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usercan also be supplied. These global query options must precede the
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userfirst tuple of name, class, type, options, flags, and query options
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usersupplied on the command line. Any global query options can be
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Useroverridden by a query-specific set of query options. For example:
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<programlisting>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein</programlisting>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Usershows how <command>dig</command> could be used from the command line
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userto make three lookups: an ANY query for <literal>www.isc.org</literal>, a
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userreverse lookup of 127.0.0.1 and a query for the NS records of
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserA global query option of <parameter>+qr</parameter> is applied, so
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeinthat <command>dig</command> shows the initial query it made for each
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userlookup. The final query has a local query option of
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<parameter>+noqr</parameter> which means that <command>dig</command>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox Userwill not print the initial query when it looks up the NS records for
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<citerefentry>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<refentrytitle>host</refentrytitle><manvolnum>1</manvolnum>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User</citerefentry>,
9054d0bb0301aa04ea1ff700ebe4beaf0b573d24Tinderbox User<citerefentry>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User</citerefentry>,
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<citerefentry>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User<refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox User</citerefentry>,
8e16b3078757ba3010c24aef805e9e29ed19518bTinderbox UserThere are probably too many query options.