dig.html revision 8dc5d5e460da15b2481893687cad7e5b72d0314a
cd348e325366620fe047edcc849e3c9424828599Peter Bray - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
0ca9a2c194523c517c3aafe5758e217ac88d6baaLubos Kosco - Copyright (C) 2000-2003 Internet Software Consortium.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray - Permission to use, copy, modify, and distribute this software for any
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal - purpose with or without fee is hereby granted, provided that the above
983523cf73bc85cce6282cb5aa78b60f6bcd959fLubos Kosco - copyright notice and this permission notice appear in all copies.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
c577d2f6c082eaff9af5bc997d12f3d3bcef537cPeter Bray - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
d20bb899e2e6c692130af57903cb0f909e7bec2aGerbrand van Dieijen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
983523cf73bc85cce6282cb5aa78b60f6bcd959fLubos Kosco - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray - PERFORMANCE OF THIS SOFTWARE.
c577d2f6c082eaff9af5bc997d12f3d3bcef537cPeter Bray<!-- $Id: dig.html,v 1.42 2008/05/14 01:12:07 tbox Exp $ -->
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
d961aa46ea0d50fed47802497e45226b1965b12dVladimir Kotal<a name="man.dig"></a><div class="titlepage"></div>
983523cf73bc85cce6282cb5aa78b60f6bcd959fLubos Kosco<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
03c01ac563d31955fc2b21cd540423434509a494Matt Lewandowsky<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<p><span><strong class="command">dig</strong></span>
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal (domain information groper) is a flexible tool
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal for interrogating DNS name servers. It performs DNS lookups and
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray displays the answers that are returned from the name server(s) that
03c01ac563d31955fc2b21cd540423434509a494Matt Lewandowsky were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
c577d2f6c082eaff9af5bc997d12f3d3bcef537cPeter Bray troubleshoot DNS problems because of its flexibility, ease of use and
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal clarity of output. Other lookup tools tend to have less functionality
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal than <span><strong class="command">dig</strong></span>.
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal Although <span><strong class="command">dig</strong></span> is normally used with
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal arguments, it also has a batch mode of operation for reading lookup
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal requests from a file. A brief summary of its command-line arguments
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal and options is printed when the <code class="option">-h</code> option is given.
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal Unlike earlier versions, the BIND 9 implementation of
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal command line.
25d3d16c420712ddaa22503d2b9d1135b7c5eed2Kryštof Tulinger Unless it is told to query a specific name server,
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal <span><strong class="command">dig</strong></span> will try each of the servers listed
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal <code class="filename">/etc/resolv.conf</code>.
6ce0623fa4ef95af9d77700a1c9c19ec1a919326Guillaume Smet When no command line arguments or options are given, will perform an
6ce0623fa4ef95af9d77700a1c9c19ec1a919326Guillaume Smet NS query for "." (the root).
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal <code class="filename">${HOME}/.digrc</code>. This file is read and
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal any options in it
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal are applied before the command line arguments.
83439b4ed8fe40097dc3f2c05168d26bd7926159Vladimir Kotal The IN and CH class names overlap with the IN and CH top level
83439b4ed8fe40097dc3f2c05168d26bd7926159Vladimir Kotal domains names. Either use the <code class="option">-t</code> and
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina <code class="option">-c</code> options to specify the type and class or
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina use the <code class="option">-q</code> the specify the domain name or
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal use "IN." and "CH." when looking up these top level domains.
983523cf73bc85cce6282cb5aa78b60f6bcd959fLubos Kosco A typical invocation of <span><strong class="command">dig</strong></span> looks like:
9132ad6a7ba5525fd1a6ccd4f4bcb497385c8597ralphmayr<pre class="programlisting"> dig @server name type </pre>
c577d2f6c082eaff9af5bc997d12f3d3bcef537cPeter Bray<dt><span class="term"><code class="constant">server</code></span></dt>
0ca9a2c194523c517c3aafe5758e217ac88d6baaLubos Kosco is the name or IP address of the name server to query. This can
91a4a0519a6171d9f52be4c514959c0d65c82812Kryštof Tulinger address in dotted-decimal notation or an IPv6
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal address in colon-delimited notation. When the supplied
cd348e325366620fe047edcc849e3c9424828599Peter Bray <em class="parameter"><code>server</code></em> argument is a
cd348e325366620fe047edcc849e3c9424828599Peter Bray <span><strong class="command">dig</strong></span> resolves that name before
cd348e325366620fe047edcc849e3c9424828599Peter Bray querying that name
cd348e325366620fe047edcc849e3c9424828599Peter Bray server. If no <em class="parameter"><code>server</code></em>
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal argument is provided,
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
43dac746513591adbd09bc4f417feb385f4fd87eVladimir Kotal and queries the name servers listed there. The reply from the
3a4816d2417e1abe89a913616de36f200793bea3Vladimir Kotal server that responds is displayed.
610915d59310c9aba810740e858ba64c5e3e6a2fVladimir Kotal<dt><span class="term"><code class="constant">name</code></span></dt>
fbf97ea1786d1e25add88bbfb91810170473bc9fLubos Kosco is the name of the resource record that is to be looked up.
fbf97ea1786d1e25add88bbfb91810170473bc9fLubos Kosco<dt><span class="term"><code class="constant">type</code></span></dt>
fbf97ea1786d1e25add88bbfb91810170473bc9fLubos Kosco indicates what type of query is required —
f21b682cd9b414738a4f5a38b56f6682e537e1d2Trond Norbye ANY, A, MX, SIG, etc.
3b0448fdd830b8d04c6a71511e5d26a4fc3b5b80Lubos Kosco <em class="parameter"><code>type</code></em> can be any valid query
cd348e325366620fe047edcc849e3c9424828599Peter Bray <em class="parameter"><code>type</code></em> argument is supplied,
cd348e325366620fe047edcc849e3c9424828599Peter Bray <span><strong class="command">dig</strong></span> will perform a lookup for an
c276b1ec9722ee95a86a4a381b39c5f405fc1cc4Vladimir Kotal The <code class="option">-b</code> option sets the source IP address of the query
2cf31ec93bd5d8a2efeab511ce051da51e69aedaLubos Kosco to <em class="parameter"><code>address</code></em>. This must be a valid
c276b1ec9722ee95a86a4a381b39c5f405fc1cc4Vladimir Kotal one of the host's network interfaces or "0.0.0.0" or "::". An optional
0ca9a2c194523c517c3aafe5758e217ac88d6baaLubos Kosco may be specified by appending "#<port>"
5a0ed1213a40c9ab7c990b442b77455ee27bc799Vladimir Kotal The default query class (IN for internet) is overridden by the
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray class, such as HS for Hesiod records or CH for Chaosnet records.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
cd348e325366620fe047edcc849e3c9424828599Peter Bray in batch mode by reading a list of lookup requests to process from the
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray file <em class="parameter"><code>filename</code></em>. The file contains a
cd348e325366620fe047edcc849e3c9424828599Peter Bray queries, one per line. Each entry in the file should be organized in
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray the same way they would be presented as queries to
cd348e325366620fe047edcc849e3c9424828599Peter Bray <span><strong class="command">dig</strong></span> using the command-line interface.
cd348e325366620fe047edcc849e3c9424828599Peter Bray If a non-standard port number is to be queried, the
cd348e325366620fe047edcc849e3c9424828599Peter Bray <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
cd348e325366620fe047edcc849e3c9424828599Peter Bray the port number that <span><strong class="command">dig</strong></span> will send its
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray instead of the standard DNS port number 53. This option would be used
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray to test a name server that has been configured to listen for queries
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray on a non-standard port number.
0ca9a2c194523c517c3aafe5758e217ac88d6baaLubos Kosco The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
5762c9f28c2246777be0e9d49cb29d9c0f49146dLubos Kosco use IPv4 query transport. The <code class="option">-6</code> option forces
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray The <code class="option">-t</code> option sets the query type to
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray <em class="parameter"><code>type</code></em>. It can be any valid query type
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray supported in BIND 9. The default query type is "A", unless the
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <code class="option">-x</code> option is supplied to indicate a reverse lookup.
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray A zone transfer can be requested by specifying a type of AXFR. When
b34561d2c3d92fac37dbced05ba6a8738e3d20e9Lubos Kosco an incremental zone transfer (IXFR) is required,
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray The incremental zone transfer will contain the changes made to the zone
5e6c91d7e77062129cd0b6ac8aaa546dff216419Lubos Kosco since the serial number in the zone's SOA record was
cd348e325366620fe047edcc849e3c9424828599Peter Bray The <code class="option">-q</code> option sets the query name to
cd348e325366620fe047edcc849e3c9424828599Peter Bray <em class="parameter"><code>name</code></em>. This useful do distinguish the
cd348e325366620fe047edcc849e3c9424828599Peter Bray <em class="parameter"><code>name</code></em> from other arguments.
cd348e325366620fe047edcc849e3c9424828599Peter Bray Reverse lookups — mapping addresses to names — are simplified by the
cd348e325366620fe047edcc849e3c9424828599Peter Bray <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
cd348e325366620fe047edcc849e3c9424828599Peter Bray address in dotted-decimal notation, or a colon-delimited IPv6 address.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray When this option is used, there is no need to provide the
cd348e325366620fe047edcc849e3c9424828599Peter Bray <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
0b2998be561e7bf5e3479d686a5af36f712b0d9aVladimir Kotal <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
0b2998be561e7bf5e3479d686a5af36f712b0d9aVladimir Kotal automatically performs a lookup for a name like
cd348e325366620fe047edcc849e3c9424828599Peter Bray <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray query type and
cd348e325366620fe047edcc849e3c9424828599Peter Bray class to PTR and IN respectively. By default, IPv6 addresses are
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray looked up using nibble format under the IP6.ARPA domain.
cd348e325366620fe047edcc849e3c9424828599Peter Bray To use the older RFC1886 method using the IP6.INT domain
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
cd348e325366620fe047edcc849e3c9424828599Peter Bray are now experimental and are not attempted.
c842732324ee4c74ede17887ad1f0dcdc4364a2cLubos Kosco To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
c842732324ee4c74ede17887ad1f0dcdc4364a2cLubos Kosco responses using transaction signatures (TSIG), specify a TSIG key file
c842732324ee4c74ede17887ad1f0dcdc4364a2cLubos Kosco using the <code class="option">-k</code> option. You can also specify the TSIG
c842732324ee4c74ede17887ad1f0dcdc4364a2cLubos Kosco key itself on the command line using the <code class="option">-y</code> option;
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
bc5565fc58603964988b42b6aee40e246f35d94fVladimir Kotal <em class="parameter"><code>name</code></em> is the name of the TSIG key and
bc5565fc58603964988b42b6aee40e246f35d94fVladimir Kotal <em class="parameter"><code>key</code></em> is the actual key. The key is a
bc5565fc58603964988b42b6aee40e246f35d94fVladimir Kotal encoded string, typically generated by
bc5565fc58603964988b42b6aee40e246f35d94fVladimir Kotal <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
bc5565fc58603964988b42b6aee40e246f35d94fVladimir Kotal Caution should be taken when using the <code class="option">-y</code> option on
bc5565fc58603964988b42b6aee40e246f35d94fVladimir Kotal multi-user systems as the key can be visible in the output from
bc5565fc58603964988b42b6aee40e246f35d94fVladimir Kotal <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray or in the shell's history file. When
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray server that is queried needs to know the key and algorithm that is
3aa0947feb67d3e8292d84776638be98dd97fdc3Lubos Kosco being used. In BIND, this is done by providing appropriate
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
cd348e325366620fe047edcc849e3c9424828599Peter Bray<p><span><strong class="command">dig</strong></span>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray provides a number of query options which affect
cd348e325366620fe047edcc849e3c9424828599Peter Bray the way in which lookups are made and the results displayed. Some of
d961aa46ea0d50fed47802497e45226b1965b12dVladimir Kotal these set or reset flag bits in the query header, some determine which
e9dbb478e3339d96ce4f0af5c6ab7e1d35ebb86dVladimir Kotal sections of the answer get printed, and others determine the timeout
d961aa46ea0d50fed47802497e45226b1965b12dVladimir Kotal and retry strategies.
d961aa46ea0d50fed47802497e45226b1965b12dVladimir Kotal Each query option is identified by a keyword preceded by a plus sign
d961aa46ea0d50fed47802497e45226b1965b12dVladimir Kotal (<code class="literal">+</code>). Some keywords set or reset an
cd348e325366620fe047edcc849e3c9424828599Peter Bray option. These may be preceded
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray by the string <code class="literal">no</code> to negate the meaning of
cd348e325366620fe047edcc849e3c9424828599Peter Bray that keyword. Other
cd348e325366620fe047edcc849e3c9424828599Peter Bray keywords assign values to options like the timeout interval. They
cd348e325366620fe047edcc849e3c9424828599Peter Bray have the form <code class="option">+keyword=value</code>.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray The query options are:
4f3c0816485669143aa54f1c6461fcb47cf5bc5cVladimir Kotal<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
2b024356b830395446c55f50f9f724a63612e578Lubos Kosco Use [do not use] TCP when querying name servers. The default
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray behavior is to use UDP unless an AXFR or IXFR query is
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray requested, in
17d95a647aba8c37d9ac34d97e4eed729aa46f67Naseer Ahmed which case a TCP connection is used.
17d95a647aba8c37d9ac34d97e4eed729aa46f67Naseer Ahmed<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray Use [do not use] TCP when querying name servers. This alternate
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray syntax to <em class="parameter"><code>+[no]tcp</code></em> is
25d3d16c420712ddaa22503d2b9d1135b7c5eed2Kryštof Tulinger provided for backwards
25d3d16c420712ddaa22503d2b9d1135b7c5eed2Kryštof Tulinger compatibility. The "vc" stands for "virtual circuit".
25d3d16c420712ddaa22503d2b9d1135b7c5eed2Kryštof Tulinger<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
25d3d16c420712ddaa22503d2b9d1135b7c5eed2Kryštof Tulinger Ignore truncation in UDP responses instead of retrying with TCP.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray default, TCP retries are performed.
477c09a2656e6a2c1075425ad81e61d594164fa9Lubos Kosco<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
d6ee3934a24d8ccc0e4bb478405d8e5f6a35825dLubos Kosco Set the search list to contain the single domain
c842732324ee4c74ede17887ad1f0dcdc4364a2cLubos Kosco <em class="parameter"><code>somename</code></em>, as if specified in
b17cb0705d90907337b3528aa7b8ed1700806f26Vladimir Kotal <span><strong class="command">domain</strong></span> directive in
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal <code class="filename">/etc/resolv.conf</code>, and enable
8f8c3f4555e5aa3160f03f2e9c55ddbd3381357bLubos Kosco processing as if the <em class="parameter"><code>+search</code></em>
9dc24f2da404ab474e38fc4d428e5717dc9bcee4Vladimir Kotal option were given.
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray<dt><span class="term"><code class="option">+[no]search</code></span></dt>
1e4f2633aeeca23eeb54f4007ab4f54565b499a7Joel Fernandes Use [do not use] the search list defined by the searchlist or
1e4f2633aeeca23eeb54f4007ab4f54565b499a7Joel Fernandes directive in <code class="filename">resolv.conf</code> (if
d70dc22c6dce3f498251b0873638d1fea0e644a3Lubos Kosco The search list is not used by default.
d70dc22c6dce3f498251b0873638d1fea0e644a3Lubos Kosco<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
d70dc22c6dce3f498251b0873638d1fea0e644a3Lubos Kosco Perform [do not perform] a search showing intermediate
2cf31ec93bd5d8a2efeab511ce051da51e69aedaLubos Kosco<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
2cf31ec93bd5d8a2efeab511ce051da51e69aedaLubos Kosco Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
2cf31ec93bd5d8a2efeab511ce051da51e69aedaLubos Kosco<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray Sets the "aa" flag in the query.
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
1a5c2ab40bd94d2b2c63afda767ce7bbf29ecc4bJan Friedel A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal Set [do not set] the AD (authentic data) bit in the query. The
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal currently has a standard meaning only in responses, not in
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal but the ability to set the bit in the query is provided for
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal completeness.
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal Set [do not set] the CD (checking disabled) bit in the query.
6c8465e3b4611cb632cba9b0572e3e3737c8c341Vladimir Kotal requests the server to not perform DNSSEC validation of
6ce0623fa4ef95af9d77700a1c9c19ec1a919326Guillaume Smet<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
6ce0623fa4ef95af9d77700a1c9c19ec1a919326Guillaume Smet Display [do not display] the CLASS when printing the record.
6ce0623fa4ef95af9d77700a1c9c19ec1a919326Guillaume Smet<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
6ce0623fa4ef95af9d77700a1c9c19ec1a919326Guillaume Smet Display [do not display] the TTL when printing the record.
cd71fb134e037849c77364b50940b1870c4684ceVladimir Kotal<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Toggle the setting of the RD (recursion desired) bit in the
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray This bit is set by default, which means <span><strong class="command">dig</strong></span>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray normally sends recursive queries. Recursion is automatically
2b024356b830395446c55f50f9f724a63612e578Lubos Kosco when the <em class="parameter"><code>+nssearch</code></em> or
2b024356b830395446c55f50f9f724a63612e578Lubos Kosco <em class="parameter"><code>+trace</code></em> query options are
2b024356b830395446c55f50f9f724a63612e578Lubos Kosco<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
cd348e325366620fe047edcc849e3c9424828599Peter Bray When this option is set, <span><strong class="command">dig</strong></span>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray attempts to find the
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray authoritative name servers for the zone containing the name
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray looked up and display the SOA record that each name server has
2b024356b830395446c55f50f9f724a63612e578Lubos Kosco<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
2b024356b830395446c55f50f9f724a63612e578Lubos Kosco Toggle tracing of the delegation path from the root name servers
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray the name being looked up. Tracing is disabled by default. When
cd348e325366620fe047edcc849e3c9424828599Peter Bray tracing is enabled, <span><strong class="command">dig</strong></span> makes
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray iterative queries to
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray resolve the name being looked up. It will follow referrals from
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray root servers, showing the answer from each server that was used
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray resolve the lookup.
477c09a2656e6a2c1075425ad81e61d594164fa9Lubos Kosco<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
83439b4ed8fe40097dc3f2c05168d26bd7926159Vladimir Kotal Toggles the printing of the initial comment in the output
83439b4ed8fe40097dc3f2c05168d26bd7926159Vladimir Kotal the version of <span><strong class="command">dig</strong></span> and the query
83439b4ed8fe40097dc3f2c05168d26bd7926159Vladimir Kotal options that have
477c09a2656e6a2c1075425ad81e61d594164fa9Lubos Kosco been applied. This comment is printed by default.
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina<dt><span class="term"><code class="option">+[no]short</code></span></dt>
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina Provide a terse answer. The default is to print the answer in a
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina verbose form.
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
3ba66fbb56ef22f183da783a1b2718280c357a4eStanislav Kozina Show [or do not show] the IP address and port number that
cd348e325366620fe047edcc849e3c9424828599Peter Bray supplied the
cd348e325366620fe047edcc849e3c9424828599Peter Bray answer when the <em class="parameter"><code>+short</code></em> option
cd348e325366620fe047edcc849e3c9424828599Peter Bray is enabled. If
cd348e325366620fe047edcc849e3c9424828599Peter Bray short form answers are requested, the default is not to show the
cd348e325366620fe047edcc849e3c9424828599Peter Bray source address and port number of the server that provided the
cd348e325366620fe047edcc849e3c9424828599Peter Bray<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
d280c5e286f5b98be13237f52281ae5afdcf51b9Peter Bray Toggle the display of comment lines in the output. The default
cd348e325366620fe047edcc849e3c9424828599Peter Bray print comments.
c577d2f6c082eaff9af5bc997d12f3d3bcef537cPeter Bray<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
4e854c69a0484765dcd27b0e837898c8b6969beaTrond Norbye This query option toggles the printing of statistics: when the
c577d2f6c082eaff9af5bc997d12f3d3bcef537cPeter Bray was made, the size of the reply and so on. The default
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye to print the query statistics.
3a5046f0538ba9fb3a9429199544a9f4b93d9a4dLubos Kosco<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
3a5046f0538ba9fb3a9429199544a9f4b93d9a4dLubos Kosco Print [do not print] the query as it is sent.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray By default, the query is not printed.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]question</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Print [do not print] the question section of a query when an
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray returned. The default is to print the question section as a
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Display [do not display] the answer section of a reply. The
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray is to display it.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Display [do not display] the authority section of a reply. The
0ca9a2c194523c517c3aafe5758e217ac88d6baaLubos Kosco default is to display it.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Display [do not display] the additional section of a reply.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray The default is to display it.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]all</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Set or clear all display flags.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+time=T</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Sets the timeout for a query to
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <em class="parameter"><code>T</code></em> seconds. The default
c83dfde6b364917fa8ed28142d509a7c29a4da68Vladimir Kotal timeout is 5 seconds.
c83dfde6b364917fa8ed28142d509a7c29a4da68Vladimir Kotal An attempt to set <em class="parameter"><code>T</code></em> to less
c83dfde6b364917fa8ed28142d509a7c29a4da68Vladimir Kotal than 1 will result
c83dfde6b364917fa8ed28142d509a7c29a4da68Vladimir Kotal in a query timeout of 1 second being applied.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+tries=T</code></span></dt>
0ca9a2c194523c517c3aafe5758e217ac88d6baaLubos Kosco Sets the number of times to try UDP queries to server to
cd348e325366620fe047edcc849e3c9424828599Peter Bray <em class="parameter"><code>T</code></em> instead of the default, 3.
cd348e325366620fe047edcc849e3c9424828599Peter Bray <em class="parameter"><code>T</code></em> is less than or equal to
cd348e325366620fe047edcc849e3c9424828599Peter Bray zero, the number of
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray tries is silently rounded up to 1.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+retry=T</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Sets the number of times to retry UDP queries to server to
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <em class="parameter"><code>T</code></em> instead of the default, 2.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <em class="parameter"><code>+tries</code></em>, this does not include
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
56d93b0c761868f813ac0bc0b5bc21a7a9fefd89Vladimir Kotal Set the number of dots that have to appear in
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye considered absolute. The default value is that defined using
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye ndots statement is present. Names with fewer dots are
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye interpreted as
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye relative names and will be searched for in the domains listed in
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye <code class="option">search</code> or <code class="option">domain</code> directive in
d0767114e1a949e4a42358f5aeaa08590b87cd80Trond Norbye <code class="filename">/etc/resolv.conf</code>.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal Set the UDP message buffer size advertised using EDNS0 to
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal of this buffer are 65535 and 0 respectively. Values outside
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal this range are rounded up or down appropriately.
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal Values other than zero will cause a EDNS query to be sent.
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal<dt><span class="term"><code class="option">+edns=#</code></span></dt>
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal Specify the EDNS version to query with. Valid values
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal are 0 to 255. Setting the EDNS version will cause a
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal EDNS query to be sent. <code class="option">+noedns</code> clears the
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal remembered EDNS version.
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal Print records like the SOA records in a verbose multi-line
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal format with human-readable comments. The default is to print
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal each record on a single line, to facilitate machine parsing
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal of the <span><strong class="command">dig</strong></span> output.
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
f9e7e93ed37cbcb0a111b6f997bb75d567c31c0bVladimir Kotal Do not try the next server if you receive a SERVFAIL. The
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray to not try the next server which is the reverse of normal stub
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Attempt to display the contents of messages which are malformed.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray The default is to not display malformed answers.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Requests DNSSEC records be sent by setting the DNSSEC OK bit
c276b1ec9722ee95a86a4a381b39c5f405fc1cc4Vladimir Kotal in the OPT record in the additional section of the query.
c276b1ec9722ee95a86a4a381b39c5f405fc1cc4Vladimir Kotal<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
4e854c69a0484765dcd27b0e837898c8b6969beaTrond Norbye Chase DNSSEC signature chains. Requires dig be compiled with
4e854c69a0484765dcd27b0e837898c8b6969beaTrond Norbye -DDIG_SIGCHASE.
4e854c69a0484765dcd27b0e837898c8b6969beaTrond Norbye<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
4e854c69a0484765dcd27b0e837898c8b6969beaTrond Norbye Specifies a file containing trusted keys to be used with
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <code class="option">+sigchase</code>. Each DNSKEY record must be
4e854c69a0484765dcd27b0e837898c8b6969beaTrond Norbye on its own line.
a3a5f5c0500064f4c6ac3658b1e3e4d838912329Lubos Kosco If not specified <span><strong class="command">dig</strong></span> will look for
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <code class="filename">/etc/trusted-key.key</code> then
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <code class="filename">trusted-key.key</code> in the current directory.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Requires dig be compiled with -DDIG_SIGCHASE.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray When chasing DNSSEC signature chains perform a top-down
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Requires dig be compiled with -DDIG_SIGCHASE.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray Include an EDNS name server ID request when sending a query.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray The BIND 9 implementation of <span><strong class="command">dig </strong></span>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray specifying multiple queries on the command line (in addition to
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray supporting the <code class="option">-f</code> batch file option). Each of those
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray queries can be supplied with its own set of flags, options and query
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray In this case, each <em class="parameter"><code>query</code></em> argument
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray represent an
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray individual query in the command-line syntax described above. Each
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray consists of any of the standard options and flags, the name to be
00b85c9d9a85faeb07d1570f20b19343feed9239Vladimir Kotal looked up, an optional query type and class and any query options that
d20bb899e2e6c692130af57903cb0f909e7bec2aGerbrand van Dieijen should be applied to that query.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray A global set of query options, which should be applied to all queries,
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray can also be supplied. These global query options must precede the
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray first tuple of name, class, type, options, flags, and query options
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray supplied on the command line. Any global query options (except
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray the <code class="option">+[no]cmd</code> option) can be
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray overridden by a query-specific set of query options. For example:
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Braydig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
03c01ac563d31955fc2b21cd540423434509a494Matt Lewandowsky shows how <span><strong class="command">dig</strong></span> could be used from the
03c01ac563d31955fc2b21cd540423434509a494Matt Lewandowsky to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
03c01ac563d31955fc2b21cd540423434509a494Matt Lewandowsky reverse lookup of 127.0.0.1 and a query for the NS records of
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray A global query option of <em class="parameter"><code>+qr</code></em> is
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray that <span><strong class="command">dig</strong></span> shows the initial query it made
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray lookup. The final query has a local query option of
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray will not print the initial query when it looks up the NS records for
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray domain name) support, it can accept and display non-ASCII domain names.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <span><strong class="command">dig</strong></span> appropriately converts character encoding of
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray domain name before sending a request to DNS server or displaying a
846f363df9084d555cb69b57561c3e788773f42aVladimir Kotal reply from the server.
00b85c9d9a85faeb07d1570f20b19343feed9239Vladimir Kotal If you'd like to turn off the IDN support for some reason, defines
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray the <code class="envar">IDN_DISABLE</code> environment variable.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray The IDN support is disabled if the variable is set when
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <span><strong class="command">dig</strong></span> runs.
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
d2a02e104622a26dd90fa88f4f17188f2039809fPeter Bray There are probably too many query options.