dig.docbook revision 627a9ceb63b1346f53e2fb624de4cdb14efb7e72
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen [<!ENTITY mdash "—">]>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - Copyright (C) 2004-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - Copyright (C) 2000-2003 Internet Software Consortium.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - Permission to use, copy, modify, and/or distribute this software for any
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - purpose with or without fee is hereby granted, provided that the above
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - copyright notice and this permission notice appear in all copies.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - PERFORMANCE OF THIS SOFTWARE.
07630cea1f3a845c09309f197ac7c4f11edd3b62Lennart Poettering <refentryinfo>
07630cea1f3a845c09309f197ac7c4f11edd3b62Lennart Poettering </refentryinfo>
07630cea1f3a845c09309f197ac7c4f11edd3b62Lennart Poettering <refpurpose>DNS lookup utility</refpurpose>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <holder>Internet Software Consortium.</holder>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <refsynopsisdiv>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <cmdsynopsis>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-b <replaceable class="parameter">address</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-f <replaceable class="parameter">filename</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-k <replaceable class="parameter">filename</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-p <replaceable class="parameter">port#</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-q <replaceable class="parameter">name</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-t <replaceable class="parameter">type</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-x <replaceable class="parameter">addr</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg><option>-y <replaceable class="parameter"><optional>hmac:</optional>name:key</replaceable></option></arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </cmdsynopsis>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <cmdsynopsis>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </cmdsynopsis>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <cmdsynopsis>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <arg choice="opt" rep="repeat">global-queryopt</arg>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </cmdsynopsis>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </refsynopsisdiv>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen (domain information groper) is a flexible tool
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen for interrogating DNS name servers. It performs DNS lookups and
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen displays the answers that are returned from the name server(s) that
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen were queried. Most DNS administrators use <command>dig</command> to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen troubleshoot DNS problems because of its flexibility, ease of use and
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen clarity of output. Other lookup tools tend to have less functionality
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Although <command>dig</command> is normally used with
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen arguments, it also has a batch mode of operation for reading lookup
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen requests from a file. A brief summary of its command-line arguments
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen and options is printed when the <option>-h</option> option is given.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Unlike earlier versions, the BIND 9 implementation of
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> allows multiple lookups to be issued
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen command line.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Unless it is told to query a specific name server,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> will try each of the servers listed in
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <filename>/etc/resolv.conf</filename>. If no usable server addresses
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen are found, <command>dig</command> will send the query to the local
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen When no command line arguments or options are given,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> will perform an NS query for "." (the root).
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen It is possible to set per-user defaults for <command>dig</command> via
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <filename>${HOME}/.digrc</filename>. This file is read and
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen any options in it
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen are applied before the command line arguments.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The IN and CH class names overlap with the IN and CH top level
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen domain names. Either use the <option>-t</option> and
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <option>-c</option> options to specify the type and class,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen use the <option>-q</option> the specify the domain name, or
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen use "IN." and "CH." when looking up these top level domains.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen A typical invocation of <command>dig</command> looks like:
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <programlisting> dig @server name type </programlisting>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <variablelist>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen is the name or IP address of the name server to query. This
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen can be an IPv4 address in dotted-decimal notation or an IPv6
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen address in colon-delimited notation. When the supplied
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen <parameter>server</parameter> argument is a hostname,
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen <command>dig</command> resolves that name before querying
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen that name server.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen If no <parameter>server</parameter> argument is
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen address is found there, it queries the name server at
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen that address. If either of the <option>-4</option> or
e53fc357a9bb9d0a5362ccc4246d598cb0febd5eLennart Poettering <option>-6</option> options are in use, then
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen only addresses for the corresponding transport
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen will be tried. If no usable addresses are found,
23446f01480e1d6f72a03d71f9c67cbf34ddaf3bMichal Schmidt <command>dig</command> will send the query to the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen local host. The reply from the name server that
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen responds is displayed.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
52d629010db73a9466c359201916494bd55186d1Tom Gundersen is the name of the resource record that is to be looked up.
52d629010db73a9466c359201916494bd55186d1Tom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
52d629010db73a9466c359201916494bd55186d1Tom Gundersen indicates what type of query is required —
52d629010db73a9466c359201916494bd55186d1Tom Gundersen ANY, A, MX, SIG, etc.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>type</parameter> can be any valid query
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>type</parameter> argument is supplied,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> will perform a lookup for an
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </variablelist>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The <option>-b</option> option sets the source IP address of the query
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen to <parameter>address</parameter>. This must be a valid
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen one of the host's network interfaces or "0.0.0.0" or "::". An optional
4afd3348c7506dd1d36305b7bcb9feb8952b9d6bLennart Poettering may be specified by appending "#<port>"
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The default query class (IN for internet) is overridden by the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <option>-c</option> option. <parameter>class</parameter> is
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen class, such as HS for Hesiod records or CH for Chaosnet records.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The <option>-f</option> option makes <command>dig </command>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen in batch mode by reading a list of lookup requests to process from the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen file <parameter>filename</parameter>. The file contains a
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen queries, one per line. Each entry in the file should be organized in
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen the same way they would be presented as queries to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> using the command-line interface.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The <option>-m</option> option enables memory usage debugging.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <!-- It enables ISC_MEM_DEBUGTRACE and ISC_MEM_DEBUGRECORD
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen documented in include/isc/mem.h -->
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen If a non-standard port number is to be queried, the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <option>-p</option> option is used. <parameter>port#</parameter> is
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen the port number that <command>dig</command> will send its
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen instead of the standard DNS port number 53. This option would be used
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen to test a name server that has been configured to listen for queries
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen on a non-standard port number.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The <option>-4</option> option forces <command>dig</command>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen use IPv4 query transport. The <option>-6</option> option forces
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> to only use IPv6 query transport.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The <option>-t</option> option sets the query type to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>type</parameter>. It can be any valid query type
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen supported in BIND 9. The default query type is "A", unless the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <option>-x</option> option is supplied to indicate a reverse lookup.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen A zone transfer can be requested by specifying a type of AXFR. When
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen an incremental zone transfer (IXFR) is required,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>type</parameter> is set to <literal>ixfr=N</literal>.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The incremental zone transfer will contain the changes made to the zone
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen since the serial number in the zone's SOA record was
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The <option>-q</option> option sets the query name to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>name</parameter>. This is useful to distinguish the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>name</parameter> from other arguments.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The <option>-v</option> causes <command>dig</command> to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen print the version number and exit.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Reverse lookups — mapping addresses to names — are simplified by the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <option>-x</option> option. <parameter>addr</parameter> is
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen address in dotted-decimal notation, or a colon-delimited IPv6 address.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen When this option is used, there is no need to provide the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>name</parameter>, <parameter>class</parameter> and
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>type</parameter> arguments. <command>dig</command>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen automatically performs a lookup for a name like
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers <literal>11.12.13.10.in-addr.arpa</literal> and sets the
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers query type and
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers class to PTR and IN respectively. By default, IPv6 addresses are
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers looked up using nibble format under the IP6.ARPA domain.
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers To use the older RFC1886 method using the IP6.INT domain
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers specify the <option>-i</option> option. Bit string labels (RFC2874)
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers are now experimental and are not attempted.
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers To sign the DNS queries sent by <command>dig</command> and
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers responses using transaction signatures (TSIG), specify a TSIG key file
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen using the <option>-k</option> option. You can also specify the TSIG
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen key itself on the command line using the <option>-y</option> option;
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>hmac</parameter> is the type of the TSIG, default HMAC-MD5,
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers <parameter>name</parameter> is the name of the TSIG key and
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>key</parameter> is the actual key. The key is a
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen encoded string, typically generated by
a9ec9f29420623133c419ddc8864921a824751fbKay Sievers <citerefentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </citerefentry>.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Caution should be taken when using the <option>-y</option> option on
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen multi-user systems as the key can be visible in the output from
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <citerefentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <refentrytitle>ps</refentrytitle><manvolnum>1</manvolnum>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </citerefentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen or in the shell's history file. When
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen using TSIG authentication with <command>dig</command>, the name
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen server that is queried needs to know the key and algorithm that is
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen being used. In BIND, this is done by providing appropriate
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>key</command> and <command>server</command> statements in
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen provides a number of query options which affect
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen the way in which lookups are made and the results displayed. Some of
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen these set or reset flag bits in the query header, some determine which
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen sections of the answer get printed, and others determine the timeout
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen and retry strategies.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Each query option is identified by a keyword preceded by a plus sign
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen (<literal>+</literal>). Some keywords set or reset an
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen option. These may be preceded
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen by the string <literal>no</literal> to negate the meaning of
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen that keyword. Other
6ad623a3f77e087e308f334525fd4046811f2a9aLennart Poettering keywords assign values to options like the timeout interval. They
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen have the form <option>+keyword=value</option>.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The query options are:
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <variablelist>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Use [do not use] TCP when querying name servers. The default
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen behavior is to use UDP unless an AXFR or IXFR query is
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen requested, in
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen which case a TCP connection is used.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Use [do not use] TCP when querying name servers. This alternate
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen provided for backwards
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen compatibility. The "vc" stands for "virtual circuit".
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Ignore truncation in UDP responses instead of retrying with TCP.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen default, TCP retries are performed.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <term><option>+domain=somename</option></term>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Set the search list to contain the single domain
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>somename</parameter>, as if specified in
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <filename>/etc/resolv.conf</filename>, and enable
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen processing as if the <parameter>+search</parameter>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen option were given.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Use [do not use] the search list defined by the searchlist or
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen directive in <filename>resolv.conf</filename> (if
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The search list is not used by default.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Perform [do not perform] a search showing intermediate
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Deprecated, treated as a synonym for <parameter>+[no]search</parameter>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Sets the "aa" flag in the query.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen A synonym for <parameter>+[no]aaonly</parameter>.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Set [do not set] the AD (authentic data) bit in the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen query. This requests the server to return whether
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen all of the answer and authority sections have all
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen been validated as secure according to the security
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen policy of the server. AD=1 indicates that all records
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen have been validated as secure and the answer is not
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen from a OPT-OUT range. AD=0 indicate that some part
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen of the answer was insecure or not validated. This
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen bit is set by default.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Set [do not set] the CD (checking disabled) bit in the query.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen requests the server to not perform DNSSEC validation of
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Display [do not display] the CLASS when printing the record.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Display [do not display] the TTL when printing the record.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
7141e4f62c3f220872df3114c42d9e4b9525e43eTom Gundersen Toggle the setting of the RD (recursion desired) bit
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen in the query. This bit is set by default, which means
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> normally sends recursive
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen queries. Recursion is automatically disabled when
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>+trace</parameter> query options are used.
bba061662b0f759abb43bad60c9733305c191045Tom Gundersen </varlistentry>
bba061662b0f759abb43bad60c9733305c191045Tom Gundersen <varlistentry>
bba061662b0f759abb43bad60c9733305c191045Tom Gundersen When this option is set, <command>dig</command>
e53fc357a9bb9d0a5362ccc4246d598cb0febd5eLennart Poettering attempts to find the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen authoritative name servers for the zone containing the name
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen looked up and display the SOA record that each name server has
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Toggle tracing of the delegation path from the root
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen name servers for the name being looked up. Tracing
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen is disabled by default. When tracing is enabled,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> makes iterative queries to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen resolve the name being looked up. It will follow
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen referrals from the root servers, showing the answer
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen from each server that was used to resolve the lookup.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>+dnssec</command> is also set when +trace is
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen set to better emulate the default queries from a nameserver.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Toggles the printing of the initial comment in the output
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen the version of <command>dig</command> and the query
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen options that have
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen been applied. This comment is printed by default.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Provide a terse answer. The default is to print the answer in a
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen verbose form.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Show [or do not show] the IP address and port number that
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen answer when the <parameter>+short</parameter> option
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen is enabled. If
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen short form answers are requested, the default is not to show the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen source address and port number of the server that provided the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Toggle the display of comment lines in the output. The default
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen is to print comments.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Toggle the display of per-record comments in the output (for
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen example, human-readable key information about DNSKEY records).
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The default is not to print record comments unless multiline
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen mode is active.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Toggle the display of cryptographic fields in DNSSEC records.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The contents of these field are unnecessary to debug most DNSSEC
4afd3348c7506dd1d36305b7bcb9feb8952b9d6bLennart Poettering validation failures and removing them makes it easier to see
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen the common failures. The default is to display the fields.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen When omitted they are replaced by the string "[omitted]" or
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen in the DNSKEY case the key id is displayed as the replacement,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen e.g. "[ key id = value ]".
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Split long hex- or base64-formatted fields in resource
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen records into chunks of <parameter>W</parameter> characters
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen (where <parameter>W</parameter> is rounded up to the nearest
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen multiple of 4).
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>+split=0</parameter> causes fields not to be
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen split at all. The default is 56 characters, or 44 characters
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen when multiline mode is active.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen This query option toggles the printing of statistics: when the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen was made, the size of the reply and so on. The default
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen to print the query statistics.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Print [do not print] the query as it is sent.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen By default, the query is not printed.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Print [do not print] the question section of a query when an
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen returned. The default is to print the question section as a
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Display [do not display] the answer section of a reply. The
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen is to display it.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Display [do not display] the authority section of a reply. The
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen default is to display it.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Display [do not display] the additional section of a reply.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The default is to display it.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Set or clear all display flags.
08232a020bd2571088d3ee06dda07732c5e963d1Tom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Sets the timeout for a query to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen timeout is 5 seconds.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen An attempt to set <parameter>T</parameter> to less
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen than 1 will result
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen in a query timeout of 1 second being applied.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Sets the number of times to try UDP queries to server to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>T</parameter> instead of the default, 3.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>T</parameter> is less than or equal to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen zero, the number of
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen tries is silently rounded up to 1.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Sets the number of times to retry UDP queries to server to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>T</parameter> instead of the default, 2.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>+tries</parameter>, this does not include
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Set the number of dots that have to appear in
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>name</parameter> to <parameter>D</parameter> for it to be
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen considered absolute. The default value is that defined using
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen ndots statement in <filename>/etc/resolv.conf</filename>, or 1 if no
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen ndots statement is present. Names with fewer dots are
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen interpreted as
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen relative names and will be searched for in the domains listed in
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <option>search</option> or <option>domain</option> directive in
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Set the UDP message buffer size advertised using EDNS0 to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>B</parameter> bytes. The maximum and minimum sizes
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen of this buffer are 65535 and 0 respectively. Values outside
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen this range are rounded up or down appropriately.
85091685af65831f379580c75b40776c20e245eeTom Gundersen Values other than zero will cause a EDNS query to be sent.
5a917c064b23c1b8a12d6abd2f9f31c575ddebc6Tom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
bf4c113e179650c07a8f95a14d71f365dbfe66e4David Herrmann Specify the EDNS version to query with. Valid values
bf4c113e179650c07a8f95a14d71f365dbfe66e4David Herrmann are 0 to 255. Setting the EDNS version will cause
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen a EDNS query to be sent. <option>+noedns</option>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen clears the remembered EDNS version. EDNS is set to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen 0 by default.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <term><option>+[no]ednsopt[=code[:value]]</option></term>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Specify EDNS option with code point <option>code</option>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen and optionally payload of <option>value</option> as a
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen hexadecimal string. <option>+noednsopt</option>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen clears the EDNS options to to be sent.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Print records like the SOA records in a verbose multi-line
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen format with human-readable comments. The default is to print
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen each record on a single line, to facilitate machine parsing
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Print only one (starting) SOA record when performing
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen an AXFR. The default is to print both the starting and
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen ending SOA records.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Do not try the next server if you receive a SERVFAIL. The
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen to not try the next server which is the reverse of normal stub
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Attempt to display the contents of messages which are malformed.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The default is to not display malformed answers.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Requests DNSSEC records be sent by setting the DNSSEC OK bit
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen in the OPT record in the additional section of the query.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Chase DNSSEC signature chains. Requires dig be compiled with
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen -DDIG_SIGCHASE.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <term><option>+trusted-key=####</option></term>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Specifies a file containing trusted keys to be used with
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <option>+sigchase</option>. Each DNSKEY record must be
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen on its own line.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen If not specified, <command>dig</command> will look for
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <filename>/etc/trusted-key.key</filename> then
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <filename>trusted-key.key</filename> in the current directory.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Requires dig be compiled with -DDIG_SIGCHASE.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen When chasing DNSSEC signature chains perform a top-down
7283a80d10217b929acf58899f016ca06dacdc53Tom Gundersen Requires dig be compiled with -DDIG_SIGCHASE.
7283a80d10217b929acf58899f016ca06dacdc53Tom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Include an EDNS name server ID request when sending a query.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Keep the TCP socket open between queries and reuse it rather
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen than creating a new TCP socket for each lookup. The default
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <term><option>+[no]sit<optional>=####</optional></option></term>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Send a Source Identity Token EDNS option, with optional value.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Replaying a SIT from a previous response will allow the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen server to identify a previous client. The default is
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <option>+nosit</option>. Currently using experimental value
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen 65001 for the option code.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <term><option>+[no]subnet=addr/prefix</option></term>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Send an EDNS Client Subnet option with the speciifed
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen IP address or network prefix.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
afcac065c0f649ebcf0f450475a8d7c3bc776d14Tom Gundersen <varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen Send an EDNS Expire option. Currently using experimental
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen value 65002 for the option code.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </varlistentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </variablelist>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The BIND 9 implementation of <command>dig </command>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen specifying multiple queries on the command line (in addition to
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen supporting the <option>-f</option> batch file option). Each of those
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen queries can be supplied with its own set of flags, options and query
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen In this case, each <parameter>query</parameter> argument
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen individual query in the command-line syntax described above. Each
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen consists of any of the standard options and flags, the name to be
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen looked up, an optional query type and class and any query options that
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen should be applied to that query.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen A global set of query options, which should be applied to all queries,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen can also be supplied. These global query options must precede the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen first tuple of name, class, type, options, flags, and query options
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen supplied on the command line. Any global query options (except
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen overridden by a query-specific set of query options. For example:
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <programlisting>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersendig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen</programlisting>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen shows how <command>dig</command> could be used from the
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen to make three lookups: an ANY query for <literal>www.isc.org</literal>, a
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen reverse lookup of 127.0.0.1 and a query for the NS records of
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen A global query option of <parameter>+qr</parameter> is
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen that <command>dig</command> shows the initial query it made
bf4c113e179650c07a8f95a14d71f365dbfe66e4David Herrmann lookup. The final query has a local query option of
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <parameter>+noqr</parameter> which means that <command>dig</command>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen will not print the initial query when it looks up the NS records for
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen If <command>dig</command> has been built with IDN (internationalized
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen domain name) support, it can accept and display non-ASCII domain names.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <command>dig</command> appropriately converts character encoding of
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen domain name before sending a request to DNS server or displaying a
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen reply from the server.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen If you'd like to turn off the IDN support for some reason, defines
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen the <envar>IDN_DISABLE</envar> environment variable.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen The IDN support is disabled if the variable is set when
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <refentrytitle>host</refentrytitle><manvolnum>1</manvolnum>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </citerefentry>,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <citerefentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <refentrytitle>named</refentrytitle><manvolnum>8</manvolnum>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </citerefentry>,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <citerefentry>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen </citerefentry>,
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen There are probably too many query options.
57fa1d094cd2c5ac68970526ad0a0754c548e75dTom Gundersen - Local variables: