dig.docbook revision 0f5144163c44a67d9be986383769852a0dae502a
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
f3064bfd1b75f7408cff6dbdb864ad62390307d3Mark Andrews "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews [<!ENTITY mdash "—">]>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer - Copyright (C) 2004-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer - Copyright (C) 2000-2003 Internet Software Consortium.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence - Permission to use, copy, modify, and/or distribute this software for any
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - purpose with or without fee is hereby granted, provided that the above
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - copyright notice and this permission notice appear in all copies.
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <refentryinfo>
c9defbf4b968e8a61f391246431ac63d0d6a39abMichael Sawyer </refentryinfo>
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer </refnamediv>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
0e0e575ec135a983a53c501cf48734b823361ab4Brian Wellington <holder>Internet Software Consortium.</holder>
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson <refsynopsisdiv>
a5ed46c9fd270775c39770bfd0250a52d374ebf2Michael Sawyer <cmdsynopsis>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg><option>-b <replaceable class="parameter">address</replaceable></option></arg>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews <arg><option>-f <replaceable class="parameter">filename</replaceable></option></arg>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg><option>-k <replaceable class="parameter">filename</replaceable></option></arg>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg><option>-p <replaceable class="parameter">port#</replaceable></option></arg>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg><option>-q <replaceable class="parameter">name</replaceable></option></arg>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg><option>-t <replaceable class="parameter">type</replaceable></option></arg>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg><option>-x <replaceable class="parameter">addr</replaceable></option></arg>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg><option>-y <replaceable class="parameter"><optional>hmac:</optional>name:key</replaceable></option></arg>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <arg choice="opt" rep="repeat">queryopt</arg>
a5ed46c9fd270775c39770bfd0250a52d374ebf2Michael Sawyer </cmdsynopsis>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <cmdsynopsis>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </cmdsynopsis>
78838d3e0cd62423c23de5503910e01884d2104bBrian Wellington <cmdsynopsis>
78838d3e0cd62423c23de5503910e01884d2104bBrian Wellington <arg choice="opt" rep="repeat">global-queryopt</arg>
78838d3e0cd62423c23de5503910e01884d2104bBrian Wellington </cmdsynopsis>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </refsynopsisdiv>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer (domain information groper) is a flexible tool
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer for interrogating DNS name servers. It performs DNS lookups and
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer displays the answers that are returned from the name server(s) that
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer were queried. Most DNS administrators use <command>dig</command> to
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer troubleshoot DNS problems because of its flexibility, ease of use and
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson clarity of output. Other lookup tools tend to have less functionality
78838d3e0cd62423c23de5503910e01884d2104bBrian Wellington Although <command>dig</command> is normally used with
36c754f274dd439e5a7ebf2401427c1d51b21302Brian Wellington arguments, it also has a batch mode of operation for reading lookup
78838d3e0cd62423c23de5503910e01884d2104bBrian Wellington requests from a file. A brief summary of its command-line arguments
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer and options is printed when the <option>-h</option> option is given.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Unlike earlier versions, the BIND 9 implementation of
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <command>dig</command> allows multiple lookups to be issued
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer command line.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Unless it is told to query a specific name server,
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <command>dig</command> will try each of the servers listed in
78838d3e0cd62423c23de5503910e01884d2104bBrian Wellington <filename>/etc/resolv.conf</filename>. If no usable server addresses
9a762177e6a0aff3ea5c00f87568c8ae3cd0e6c7Andreas Gustafsson are found, <command>dig</command> will send the query to the local
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington When no command line arguments or options are given,
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington <command>dig</command> will perform an NS query for "." (the root).
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington It is possible to set per-user defaults for <command>dig</command> via
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington <filename>${HOME}/.digrc</filename>. This file is read and
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington any options in it
cc48bb397fa6ba889f25157840492e68114dec8fBrian Wellington are applied before the command line arguments.
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington The IN and CH class names overlap with the IN and CH top level
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington domain names. Either use the <option>-t</option> and
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington <option>-c</option> options to specify the type and class,
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington use the <option>-q</option> the specify the domain name, or
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer use "IN." and "CH." when looking up these top level domains.
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington A typical invocation of <command>dig</command> looks like:
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <programlisting> dig @server name type </programlisting>
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews <variablelist>
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <varlistentry>
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington is the name or IP address of the name server to query. This
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington can be an IPv4 address in dotted-decimal notation or an IPv6
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington address in colon-delimited notation. When the supplied
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <parameter>server</parameter> argument is a hostname,
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <command>dig</command> resolves that name before querying
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington that name server.
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington If no <parameter>server</parameter> argument is
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <filename>/etc/resolv.conf</filename>; if an
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington address is found there, it queries the name server at
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington that address. If either of the <option>-4</option> or
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <option>-6</option> options are in use, then
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington only addresses for the corresponding transport
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington will be tried. If no usable addresses are found,
2a23a625246acfbf6ff92b86a6b8b9df59dbeaa4Mark Andrews <command>dig</command> will send the query to the
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews local host. The reply from the name server that
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews responds is displayed.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews </varlistentry>
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews <varlistentry>
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews is the name of the resource record that is to be looked up.
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington </varlistentry>
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <varlistentry>
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington indicates what type of query is required —
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington ANY, A, MX, SIG, etc.
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <parameter>type</parameter> can be any valid query
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <parameter>type</parameter> argument is supplied,
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington <command>dig</command> will perform a lookup for an
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington </varlistentry>
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington </variablelist>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer The <option>-b</option> option sets the source IP address of the query
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer to <parameter>address</parameter>. This must be a valid
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer one of the host's network interfaces or "0.0.0.0" or "::". An optional
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer may be specified by appending "#<port>"
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson The default query class (IN for internet) is overridden by the
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson <option>-c</option> option. <parameter>class</parameter> is
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer class, such as HS for Hesiod records or CH for Chaosnet records.
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer The <option>-f</option> option makes <command>dig </command>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer in batch mode by reading a list of lookup requests to process from the
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer file <parameter>filename</parameter>. The file contains a
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence queries, one per line. Each entry in the file should be organized in
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer the same way they would be presented as queries to
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <command>dig</command> using the command-line interface.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer The <option>-m</option> option enables memory usage debugging.
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson <!-- It enables ISC_MEM_DEBUGTRACE and ISC_MEM_DEBUGRECORD
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson documented in include/isc/mem.h -->
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson If a non-standard port number is to be queried, the
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson <option>-p</option> option is used. <parameter>port#</parameter> is
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington the port number that <command>dig</command> will send its
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer instead of the standard DNS port number 53. This option would be used
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer to test a name server that has been configured to listen for queries
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson on a non-standard port number.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer The <option>-4</option> option forces <command>dig</command>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer use IPv4 query transport. The <option>-6</option> option forces
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson <command>dig</command> to only use IPv6 query transport.
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington The <option>-t</option> option sets the query type to
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence <parameter>type</parameter>. It can be any valid query type
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer supported in BIND 9. The default query type is "A", unless the
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <option>-x</option> option is supplied to indicate a reverse lookup.
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer A zone transfer can be requested by specifying a type of AXFR. When
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer an incremental zone transfer (IXFR) is required,
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <parameter>type</parameter> is set to <literal>ixfr=N</literal>.
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer The incremental zone transfer will contain the changes made to the zone
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer since the serial number in the zone's SOA record was
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer The <option>-q</option> option sets the query name to
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <parameter>name</parameter>. This is useful to distinguish the
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <parameter>name</parameter> from other arguments.
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer The <option>-v</option> causes <command>dig</command> to
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer print the version number and exit.
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson Reverse lookups — mapping addresses to names — are simplified by the
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <option>-x</option> option. <parameter>addr</parameter> is
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer address in dotted-decimal notation, or a colon-delimited IPv6 address.
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer When this option is used, there is no need to provide the
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <parameter>name</parameter>, <parameter>class</parameter> and
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <parameter>type</parameter> arguments. <command>dig</command>
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson automatically performs a lookup for a name like
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <literal>11.12.13.10.in-addr.arpa</literal> and sets the
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer query type and
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson class to PTR and IN respectively. By default, IPv6 addresses are
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer looked up using nibble format under the IP6.ARPA domain.
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer To use the older RFC1886 method using the IP6.INT domain
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson specify the <option>-i</option> option. Bit string labels (RFC2874)
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer are now experimental and are not attempted.
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer To sign the DNS queries sent by <command>dig</command> and
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer responses using transaction signatures (TSIG), specify a TSIG key file
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer using the <option>-k</option> option. You can also specify the TSIG
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer key itself on the command line using the <option>-y</option> option;
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <parameter>hmac</parameter> is the type of the TSIG, default HMAC-MD5,
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <parameter>name</parameter> is the name of the TSIG key and
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <parameter>key</parameter> is the actual key. The key is a
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer encoded string, typically generated by
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence <citerefentry>
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer </citerefentry>.
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer Caution should be taken when using the <option>-y</option> option on
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer multi-user systems as the key can be visible in the output from
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson <citerefentry>
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson <refentrytitle>ps</refentrytitle><manvolnum>1</manvolnum>
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson </citerefentry>
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer or in the shell's history file. When
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson using TSIG authentication with <command>dig</command>, the name
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson server that is queried needs to know the key and algorithm that is
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson being used. In BIND, this is done by providing appropriate
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer <command>key</command> and <command>server</command> statements in
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson provides a number of query options which affect
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson the way in which lookups are made and the results displayed. Some of
93988fb202645e5d06b337b8e3e20765a467149dAndreas Gustafsson these set or reset flag bits in the query header, some determine which
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer sections of the answer get printed, and others determine the timeout
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer and retry strategies.
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington Each query option is identified by a keyword preceded by a plus sign
e56101fa6876c876d9957c23784b6493cdb05e09Brian Wellington (<literal>+</literal>). Some keywords set or reset an
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence option. These may be preceded
368b37b616234fce3d23099eb180f1dd38e1fb62Mark Andrews by the string <literal>no</literal> to negate the meaning of
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer that keyword. Other
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer keywords assign values to options like the timeout interval. They
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer have the form <option>+keyword=value</option>.
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer The query options are:
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <variablelist>
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer <varlistentry>
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer A synonym for <parameter>+[no]aaonly</parameter>.
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson </varlistentry>
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson <varlistentry>
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson <term><option>+[no]aaonly</option></term>
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson Sets the "aa" flag in the query.
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson </varlistentry>
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson <varlistentry>
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson <term><option>+[no]additional</option></term>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer Display [do not display] the additional section of a
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson reply. The default is to display it.
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson </varlistentry>
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews <varlistentry>
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson <term><option>+[no]adflag</option></term>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Set [do not set] the AD (authentic data) bit in the
20b6f1e657d049d9fdb251a0846465bff9b95948Andreas Gustafsson query. This requests the server to return whether
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson all of the answer and authority sections have all
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson been validated as secure according to the security
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer policy of the server. AD=1 indicates that all records
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer have been validated as secure and the answer is not
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer from a OPT-OUT range. AD=0 indicate that some part
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer of the answer was insecure or not validated. This
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer bit is set by default.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence </varlistentry>
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson <varlistentry>
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson Set or clear all display flags.
b4876b6ddf706977153954507b498baf79a23442Andreas Gustafsson </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer Display [do not display] the answer section of a
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer reply. The default is to display it.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
7804502532d6e2eee80083431a22eb5d957f52a0Michael Sawyer <varlistentry>
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer Display [do not display] the authority section of a
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer reply. The default is to display it.
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer </varlistentry>
f900be21902d02418c2c71ffed754fb3f9f54cffMichael Sawyer <varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <term><option>+[no]besteffort</option></term>
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence Attempt to display the contents of messages which are
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer malformed. The default is to not display malformed
46e349e515e0b992ecafdc9597f9d5ee0cf81b2aBrian Wellington </varlistentry>
46e349e515e0b992ecafdc9597f9d5ee0cf81b2aBrian Wellington <varlistentry>
844eaa56d6d647b38b2a5cf08f7ea5ab7b752690Michael Sawyer Set the UDP message buffer size advertised using EDNS0
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer to <parameter>B</parameter> bytes. The maximum and
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer minimum sizes of this buffer are 65535 and 0 respectively.
f900be21902d02418c2c71ffed754fb3f9f54cffMichael Sawyer Values outside this range are rounded up or down
f900be21902d02418c2c71ffed754fb3f9f54cffMichael Sawyer appropriately. Values other than zero will cause a
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson EDNS query to be sent.
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson </varlistentry>
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson <varlistentry>
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson <term><option>+[no]cdflag</option></term>
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson Set [do not set] the CD (checking disabled) bit in
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson the query. This requests the server to not perform
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson DNSSEC validation of responses.
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson </varlistentry>
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson <varlistentry>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer Display [do not display] the CLASS when printing the
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer </varlistentry>
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer <varlistentry>
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer Toggles the printing of the initial comment in the
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer output identifying the version of <command>dig</command>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer and the query options that have been applied. This
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer comment is printed by default.
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer </varlistentry>
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer <varlistentry>
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer Toggle the display of comment lines in the output.
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer The default is to print comments.
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer </varlistentry>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer <varlistentry>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer Toggle the display of cryptographic fields in DNSSEC
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer records. The contents of these field are unnecessary
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer to debug most DNSSEC validation failures and removing
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer them makes it easier to see the common failures. The
d7a2e0511222811b96f2e8757272ee383ec7b5e6Michael Sawyer default is to display the fields. When omitted they
d7a2e0511222811b96f2e8757272ee383ec7b5e6Michael Sawyer are replaced by the string "[omitted]" or in the
d7a2e0511222811b96f2e8757272ee383ec7b5e6Michael Sawyer DNSKEY case the key id is displayed as the replacement,
20b6f1e657d049d9fdb251a0846465bff9b95948Andreas Gustafsson e.g. "[ key id = value ]".
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson </varlistentry>
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews <varlistentry>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <term><option>+[no]defname</option></term>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson Deprecated, treated as a synonym for
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson </varlistentry>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <varlistentry>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <term><option>+[no]dnssec</option></term>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson Requests DNSSEC records be sent by setting the DNSSEC
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson OK bit (DO) in the OPT record in the additional section
8ef03ac2743f73f7ce3c92d739c64d31387abb45Danny Mayer </varlistentry>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <varlistentry>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <term><option>+domain=somename</option></term>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson Set the search list to contain the single domain
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <parameter>somename</parameter>, as if specified in
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <filename>/etc/resolv.conf</filename>, and enable
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson search list processing as if the
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <parameter>+search</parameter> option were given.
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson </varlistentry>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <varlistentry>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <term><option>+dscp=value</option></term> <listitem>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer Set the DSCP code point to be used when sending the
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer query. Valid DSCP code points are in the range
32e783c745299f838dd7cf8ffe2032775a80f1d0Andreas Gustafsson [0..63]. By default no code point is explicitly set.
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer Specify the EDNS version to query with. Valid values
20b6f1e657d049d9fdb251a0846465bff9b95948Andreas Gustafsson are 0 to 255. Setting the EDNS version will cause
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer a EDNS query to be sent. <option>+noedns</option>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer clears the remembered EDNS version. EDNS is set to
20b6f1e657d049d9fdb251a0846465bff9b95948Andreas Gustafsson </varlistentry>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer <varlistentry>
20b6f1e657d049d9fdb251a0846465bff9b95948Andreas Gustafsson <term><option>+[no]ednsflags[=#]</option></term>
20b6f1e657d049d9fdb251a0846465bff9b95948Andreas Gustafsson Set the must-be-zero EDNS flags bits (Z bits) to the
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews specified value. Decimal, hex and octal encodings are
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews accepted. Setting a named flag (e.g. DO) will silently be
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews ignored. By default, no Z bits are set.
20b6f1e657d049d9fdb251a0846465bff9b95948Andreas Gustafsson </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
20b6f1e657d049d9fdb251a0846465bff9b95948Andreas Gustafsson <term><option>+[no]ednsnegotiation</option></term>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Enable / disable EDNS version negotiation. By default
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson EDNS version negotiation is enabled.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson <term><option>+[no]ednsopt[=code[:value]]</option></term>
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer Specify EDNS option with code point <option>code</option>
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer and optionally payload of <option>value</option> as a
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer hexadecimal string. <option>+noednsopt</option>
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson clears the EDNS options to be sent.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson <term><option>+[no]expire</option></term>
8e61de2efdc23d1248cff0abf4cadec3325a929cMichael Sawyer Send an EDNS Expire option.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
d821f1cd7e97552401296e880e7518c98c9ebea1Michael Sawyer Do not try the next server if you receive a SERVFAIL.
9a762177e6a0aff3ea5c00f87568c8ae3cd0e6c7Andreas Gustafsson The default is to not try the next server which is
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews the reverse of normal stub resolver behavior.
9a762177e6a0aff3ea5c00f87568c8ae3cd0e6c7Andreas Gustafsson </varlistentry>
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews <varlistentry>
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer Send a query with a DNS header without a question section.
1416cae3f614faf4067e8b5a6b4732e132958bbaAndreas Gustafsson The default is to add a question section. The query type
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer and query name are ignored when this is set.
869f65bea49f8d65ab9bb14c4551215529bd7419David Lawrence </varlistentry>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <varlistentry>
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer Show [or do not show] the IP address and port number
5d20773abcdf9ff3afe14a349413174f94594188Michael Sawyer that supplied the answer when the
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <parameter>+short</parameter> option is enabled. If
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson short form answers are requested, the default is not
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer to show the source address and port number of the
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer server that provided the answer.
32e783c745299f838dd7cf8ffe2032775a80f1d0Andreas Gustafsson </varlistentry>
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer <varlistentry>
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer Ignore truncation in UDP responses instead of retrying
32e783c745299f838dd7cf8ffe2032775a80f1d0Andreas Gustafsson with TCP. By default, TCP retries are performed.
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer </varlistentry>
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews <varlistentry>
55bf97a1b4b7f78b669b1179df1422cb9789c484Michael Sawyer Keep the TCP socket open between queries and reuse
5d20773abcdf9ff3afe14a349413174f94594188Michael Sawyer it rather than creating a new TCP socket for each
55bf97a1b4b7f78b669b1179df1422cb9789c484Michael Sawyer lookup. The default is <option>+nokeepopen</option>.
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer </varlistentry>
1d78c8d7cd619df2255ec52d69b0dd0d8850293fBrian Wellington <varlistentry>
1d78c8d7cd619df2255ec52d69b0dd0d8850293fBrian Wellington <term><option>+[no]multiline</option></term>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Print records like the SOA records in a verbose
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer multi-line format with human-readable comments. The
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer default is to print each record on a single line, to
0e0e575ec135a983a53c501cf48734b823361ab4Brian Wellington facilitate machine parsing of the <command>dig</command>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews Set the number of dots that have to appear in
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <parameter>name</parameter> to <parameter>D</parameter>
8e61de2efdc23d1248cff0abf4cadec3325a929cMichael Sawyer for it to be considered absolute. The default value
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer is that defined using the ndots statement in
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <filename>/etc/resolv.conf</filename>, or 1 if no
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer ndots statement is present. Names with fewer dots
38cf6e52ce4b33795713388824b69d78e430b115Michael Sawyer are interpreted as relative names and will be searched
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer for in the domains listed in the <option>search</option>
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews </varlistentry>
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews <varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Include an EDNS name server ID request when sending
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews <varlistentry>
5f01e77fc23fe9665fa2b8acd0a0c5bfbf61d61dBrian Wellington When this option is set, <command>dig</command>
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews attempts to find the authoritative name servers for
e412ae947df6de858883564b8676a9650df70d9aMark Andrews the zone containing the name being looked up and
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer display the SOA record that each name server has for
f900be21902d02418c2c71ffed754fb3f9f54cffMichael Sawyer </varlistentry>
b31e7ab8857a62eb94d4a6a681243739f158374dDanny Mayer <varlistentry>
6e3a8e17fdf108f47bbba17474fd3d120d356b2fBrian Wellington Print only one (starting) SOA record when performing
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews an AXFR. The default is to print both the starting
5f01e77fc23fe9665fa2b8acd0a0c5bfbf61d61dBrian Wellington and ending SOA records.
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews </varlistentry>
5f01e77fc23fe9665fa2b8acd0a0c5bfbf61d61dBrian Wellington <varlistentry>
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews Print [do not print] the query as it is sent. By
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence default, the query is not printed.
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Print [do not print] the question section of a query
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington when an answer is returned. The default is to print
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer the question section as a comment.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
19c8df90f1f23c3df870c1771c89c1acdb15020eMichael Sawyer <varlistentry>
19c8df90f1f23c3df870c1771c89c1acdb15020eMichael Sawyer Toggle the setting of the RD (recursion desired) bit
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer in the query. This bit is set by default, which means
869f65bea49f8d65ab9bb14c4551215529bd7419David Lawrence <command>dig</command> normally sends recursive
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer queries. Recursion is automatically disabled when
b31e7ab8857a62eb94d4a6a681243739f158374dDanny Mayer <parameter>+trace</parameter> query options are used.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Sets the number of times to retry UDP queries to
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer server to <parameter>T</parameter> instead of the
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer default, 2. Unlike <parameter>+tries</parameter>,
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer this does not include the initial query.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <term><option>+[no]rrcomments</option></term>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Toggle the display of per-record comments in the
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer output (for example, human-readable key information
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer about DNSKEY records). The default is not to print
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer record comments unless multiline mode is active.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Use [do not use] the search list defined by the
e715e011788a529446b8013239c33599542ece32Michael Sawyer searchlist or domain directive in
e715e011788a529446b8013239c33599542ece32Michael Sawyer <filename>resolv.conf</filename> (if any). The search
e715e011788a529446b8013239c33599542ece32Michael Sawyer list is not used by default.
e715e011788a529446b8013239c33599542ece32Michael Sawyer 'ndots' from <filename>resolv.conf</filename> (default 1)
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence which may be overridden by <parameter>+ndots</parameter>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer determines if the name will be treated as relative
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer or not and hence whether a search is eventually
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer performed or not.
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer </varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer <varlistentry>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Provide a terse answer. The default is to print the
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington answer in a verbose form.
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington </varlistentry>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer <varlistentry>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer <term><option>+[no]showsearch</option></term>
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer Perform [do not perform] a search showing intermediate
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington </varlistentry>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <varlistentry>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer Chase DNSSEC signature chains. Requires dig be
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer compiled with -DDIG_SIGCHASE.
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington </varlistentry>
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington <varlistentry>
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer <term><option>+[no]sit<optional>=####</optional></option></term>
6fe03d6c83ec02d4494edc870f5e892d419b6885Michael Sawyer Send a Source Identity Token EDNS option, with optional
f8fec75ee8f429821137aee090f56ab678404a56Michael Sawyer value. Replaying a SIT from a previous response will
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer allow the server to identify a previous client. The
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson default is <option>+nosit</option>. Currently using
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson experimental value 65001 for the option code.
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington </varlistentry>
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington <varlistentry>
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington Split long hex- or base64-formatted fields in resource
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer records into chunks of <parameter>W</parameter>
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson characters (where <parameter>W</parameter> is rounded
37e6e0ca1337351642798b1a6aa24ae40bf86399Andreas Gustafsson up to the nearest multiple of 4).
b266f8fc42702debc6bd89365273223fa89cd8ddBrian Wellington <parameter>+split=0</parameter> causes fields not to
bc223aaf8e952f3c88ac7ff82d726b328b990880Michael Sawyer be split at all. The default is 56 characters, or
aa6054ec74819f754bcf19442ca9b39d948171adMichael Sawyer 44 characters when multiline mode is active.
cefd68008fbba3488a077052ae62aa12b6de502bMichael Sawyer </varlistentry>