dig.html revision a24330c4805a224191ab687d0291963062fe3355
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater - Copyright (C) 2004-2011, 2013, 2014 Internet Systems Consortium, Inc. ("ISC")
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater - Copyright (C) 2000-2003 Internet Software Consortium.
59dd3b3cd954239d98ef52cd26328856cb6f2975Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater - purpose with or without fee is hereby granted, provided that the above
7b67cfadd077feb0ec3e6c78385ba0d845a9789bMark Andrews - copyright notice and this permission notice appear in all copies.
a3b428812703d22a605a9f882e71ed65f0ffdc65Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - PERFORMANCE OF THIS SOFTWARE.
56874aef380a64a2c183b7c282c3e7a361d67fa1Automatic Updater<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
04eba969cb9a54bbda2896db2067c07b2ac5ba16Automatic Updater<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews<a name="man.dig"></a><div class="titlepage"></div>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
fc3576328379e813ccf6b3a6e66d9bb701a79c83Automatic Updater<p><span><strong class="command">dig</strong></span>
298c514fff250c1a147176cfbbc1c0ca441d1ea5Automatic Updater (domain information groper) is a flexible tool
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews for interrogating DNS name servers. It performs DNS lookups and
bbb069be941f649228760edcc241122933c066d2Automatic Updater displays the answers that are returned from the name server(s) that
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
3098364bcdd7a719fbafa5fc8d2cc9e90e5a5989Automatic Updater troubleshoot DNS problems because of its flexibility, ease of use and
9d330c054e02f52cefd8dc0e71550b0fe07e077eAutomatic Updater clarity of output. Other lookup tools tend to have less functionality
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews than <span><strong class="command">dig</strong></span>.
3a6600c8d319275d73c36eb625f77103cd83e824Automatic Updater Although <span><strong class="command">dig</strong></span> is normally used with
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews command-line
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews arguments, it also has a batch mode of operation for reading lookup
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews requests from a file. A brief summary of its command-line arguments
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson and options is printed when the <code class="option">-h</code> option is given.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews Unlike earlier versions, the BIND 9 implementation of
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews command line.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews Unless it is told to query a specific name server,
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <span><strong class="command">dig</strong></span> will try each of the servers listed in
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater are found, <span><strong class="command">dig</strong></span> will send the query to the local
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont When no command line arguments or options are given,
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <code class="filename">${HOME}/.digrc</code>. This file is read and
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews any options in it
4d0520004a9663324a6a30f2d1716565e6d0024cAutomatic Updater are applied before the command line arguments.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The IN and CH class names overlap with the IN and CH top level
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater domain names. Either use the <code class="option">-t</code> and
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews <code class="option">-c</code> options to specify the type and class,
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews use the <code class="option">-q</code> the specify the domain name, or
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews use "IN." and "CH." when looking up these top level domains.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson<a name="id2543614"></a><h2>SIMPLE USAGE</h2>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson A typical invocation of <span><strong class="command">dig</strong></span> looks like:
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater<pre class="programlisting"> dig @server name type </pre>
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater<dt><span class="term"><code class="constant">server</code></span></dt>
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater is the name or IP address of the name server to query. This
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater can be an IPv4 address in dotted-decimal notation or an IPv6
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater address in colon-delimited notation. When the supplied
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <em class="parameter"><code>server</code></em> argument is a hostname,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <span><strong class="command">dig</strong></span> resolves that name before querying
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater that name server.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater If no <em class="parameter"><code>server</code></em> argument is
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater provided, <span><strong class="command">dig</strong></span> consults
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="filename">/etc/resolv.conf</code>; if an
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater address is found there, it queries the name server at
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater that address. If either of the <code class="option">-4</code> or
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="option">-6</code> options are in use, then
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater only addresses for the corresponding transport
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater will be tried. If no usable addresses are found,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <span><strong class="command">dig</strong></span> will send the query to the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater local host. The reply from the name server that
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater responds is displayed.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="constant">name</code></span></dt>
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater is the name of the resource record that is to be looked up.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="constant">type</code></span></dt>
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater indicates what type of query is required —
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ANY, A, MX, SIG, etc.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <em class="parameter"><code>type</code></em> can be any valid query
7262eb86f2b465822206122921e2f357218f0cfdAutomatic Updater <em class="parameter"><code>type</code></em> argument is supplied,
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews <span><strong class="command">dig</strong></span> will perform a lookup for an
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The <code class="option">-b</code> option sets the source IP address of the query
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater to <em class="parameter"><code>address</code></em>. This must be a valid
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews one of the host's network interfaces or "0.0.0.0" or "::". An optional
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews may be specified by appending "#<port>"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The default query class (IN for internet) is overridden by the
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater class, such as HS for Hesiod records or CH for Chaosnet records.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in batch mode by reading a list of lookup requests to process from the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater file <em class="parameter"><code>filename</code></em>. The file contains a
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater queries, one per line. Each entry in the file should be organized in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the same way they would be presented as queries to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <span><strong class="command">dig</strong></span> using the command-line interface.
00be0f9f61d4c6bf197d000bfa1a6b7e70ea0866Automatic Updater The <code class="option">-m</code> option enables memory usage debugging.
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater If a non-standard port number is to be queried, the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
f0ecd0e64ffa2a8afef95d81275d46a845f15402Automatic Updater the port number that <span><strong class="command">dig</strong></span> will send its
81c3cb9b921cda22a5a35fa32ca1bf35797b9a36Automatic Updater instead of the standard DNS port number 53. This option would be used
4f5257ba7afbe06e949d1577581de18b22ef6c05Automatic Updater to test a name server that has been configured to listen for queries
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews on a non-standard port number.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
8ae412a86ed138263796195eed82a4716e7effcbMark Andrews use IPv4 query transport. The <code class="option">-6</code> option forces
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews The <code class="option">-t</code> option sets the query type to
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <em class="parameter"><code>type</code></em>. It can be any valid query type
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater supported in BIND 9. The default query type is "A", unless the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="option">-x</code> option is supplied to indicate a reverse lookup.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews A zone transfer can be requested by specifying a type of AXFR. When
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews an incremental zone transfer (IXFR) is required,
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews The incremental zone transfer will contain the changes made to the zone
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews since the serial number in the zone's SOA record was
e076d0c88be69de7c190ab924d095e69d2e11f7aAndreas Gustafsson <em class="parameter"><code>N</code></em>.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The <code class="option">-q</code> option sets the query name to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <em class="parameter"><code>name</code></em>. This is useful to distinguish the
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews <em class="parameter"><code>name</code></em> from other arguments.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The <code class="option">-v</code> causes <span><strong class="command">dig</strong></span> to
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews print the version number and exit.
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews Reverse lookups — mapping addresses to names — are simplified by the
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington address in dotted-decimal notation, or a colon-delimited IPv6 address.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington When this option is used, there is no need to provide the
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater automatically performs a lookup for a name like
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater query type and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater class to PTR and IN respectively. By default, IPv6 addresses are
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater looked up using nibble format under the IP6.ARPA domain.
bc0a4c01beede169df81a3ee5b614ed9e82339dbAutomatic Updater To use the older RFC1886 method using the IP6.INT domain
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater are now experimental and are not attempted.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington responses using transaction signatures (TSIG), specify a TSIG key file
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington using the <code class="option">-k</code> option. You can also specify the TSIG
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington key itself on the command line using the <code class="option">-y</code> option;
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>name</code></em> is the name of the TSIG key and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>key</code></em> is the actual key. The key is a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington encoded string, typically generated by
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Caution should be taken when using the <code class="option">-y</code> option on
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington multi-user systems as the key can be visible in the output from
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington or in the shell's history file. When
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington server that is queried needs to know the key and algorithm that is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington being used. In BIND, this is done by providing appropriate
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2544009"></a><h2>QUERY OPTIONS</h2>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<p><span><strong class="command">dig</strong></span>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington provides a number of query options which affect
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the way in which lookups are made and the results displayed. Some of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington these set or reset flag bits in the query header, some determine which
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington sections of the answer get printed, and others determine the timeout
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and retry strategies.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Each query option is identified by a keyword preceded by a plus sign
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington (<code class="literal">+</code>). Some keywords set or reset an
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington option. These may be preceded
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington by the string <code class="literal">no</code> to negate the meaning of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington that keyword. Other
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington keywords assign values to options like the timeout interval. They
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington have the form <code class="option">+keyword=value</code>.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The query options are:
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
0d3490f93bb980fde704055e74c1b508987a5fe4Mark Andrews Sets the "aa" flag in the query.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington Display [do not display] the additional section of a
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews reply. The default is to display it.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington Set [do not set] the AD (authentic data) bit in the
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews query. This requests the server to return whether
998b76837ac21e4243a0f97618ea91206be8c028Automatic Updater all of the answer and authority sections have all
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington been validated as secure according to the security
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater policy of the server. AD=1 indicates that all records
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater have been validated as secure and the answer is not
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington from a OPT-OUT range. AD=0 indicate that some part
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of the answer was insecure or not validated. This
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington bit is set by default.
81c3cb9b921cda22a5a35fa32ca1bf35797b9a36Automatic Updater<dt><span class="term"><code class="option">+[no]all</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Set or clear all display flags.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Display [do not display] the answer section of a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater reply. The default is to display it.
c01dec514a81ecf8c17ca3ef8c3ba95e437295ebAutomatic Updater<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Display [do not display] the authority section of a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater reply. The default is to display it.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Attempt to display the contents of messages which are
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington malformed. The default is to not display malformed
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Set the UDP message buffer size advertised using EDNS0
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to <em class="parameter"><code>B</code></em> bytes. The maximum and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington minimum sizes of this buffer are 65535 and 0 respectively.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Values outside this range are rounded up or down
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington appropriately. Values other than zero will cause a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington EDNS query to be sent.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Set [do not set] the CD (checking disabled) bit in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the query. This requests the server to not perform
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington DNSSEC validation of responses.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews Display [do not display] the CLASS when printing the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Toggles the printing of the initial comment in the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington output identifying the version of <span><strong class="command">dig</strong></span>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and the query options that have been applied. This
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater comment is printed by default.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Toggle the display of comment lines in the output.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The default is to print comments.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Toggle the display of cryptographic fields in DNSSEC
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington records. The contents of these field are unnecessary
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to debug most DNSSEC validation failures and removing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington them makes it easier to see the common failures. The
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington default is to display the fields. When omitted they
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington are replaced by the string "[omitted]" or in the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington DNSKEY case the key id is displayed as the replacement,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington e.g. "[ key id = value ]".
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Deprecated, treated as a synonym for
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews <em class="parameter"><code>+[no]search</code></em>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews Requests DNSSEC records be sent by setting the DNSSEC
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington OK bit (DO) in the OPT record in the additional section
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of the query.
bbb069be941f649228760edcc241122933c066d2Automatic Updater<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Set the search list to contain the single domain
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>somename</code></em>, as if specified in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington a <span><strong class="command">domain</strong></span> directive in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <code class="filename">/etc/resolv.conf</code>, and enable
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington search list processing as if the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>+search</code></em> option were given.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Set the DSCP code point to be used when sending the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington query. Valid DSCP code points are in the range
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater [0..63]. By default no code point is explicitly set.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Specify the EDNS version to query with. Valid values
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater are 0 to 255. Setting the EDNS version will cause
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater a EDNS query to be sent. <code class="option">+noedns</code>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater clears the remembered EDNS version. EDNS is set to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Specify EDNS option with code point <code class="option">code</code>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and optionally payload of <code class="option">value</code> as a
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews hexadecimal string. <code class="option">+noednsopt</code>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington clears the EDNS options to be sent.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews Send an EDNS Expire option.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Do not try the next server if you receive a SERVFAIL.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The default is to not try the next server which is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the reverse of normal stub resolver behavior.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Show [or do not show] the IP address and port number
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington that supplied the answer when the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>+short</code></em> option is enabled. If
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington short form answers are requested, the default is not
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to show the source address and port number of the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington server that provided the answer.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Ignore truncation in UDP responses instead of retrying
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with TCP. By default, TCP retries are performed.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Keep the TCP socket open between queries and reuse
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater it rather than creating a new TCP socket for each
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater lookup. The default is <code class="option">+nokeepopen</code>.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Print records like the SOA records in a verbose
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington multi-line format with human-readable comments. The
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater default is to print each record on a single line, to
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews facilitate machine parsing of the <span><strong class="command">dig</strong></span>
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater Set the number of dots that have to appear in
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater for it to be considered absolute. The default value
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is that defined using the ndots statement in
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington <code class="filename">/etc/resolv.conf</code>, or 1 if no
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington ndots statement is present. Names with fewer dots
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington are interpreted as relative names and will be searched
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for in the domains listed in the <code class="option">search</code>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater or <code class="option">domain</code> directive in
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington <code class="filename">/etc/resolv.conf</code>.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Include an EDNS name server ID request when sending
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater When this option is set, <span><strong class="command">dig</strong></span>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater attempts to find the authoritative name servers for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the zone containing the name being looked up and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater display the SOA record that each name server has for
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater Print only one (starting) SOA record when performing
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater an AXFR. The default is to print both the starting
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and ending SOA records.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Print [do not print] the query as it is sent. By
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater default, the query is not printed.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]question</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Print [do not print] the question section of a query
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when an answer is returned. The default is to print
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the question section as a comment.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Toggle the setting of the RD (recursion desired) bit
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in the query. This bit is set by default, which means
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <span><strong class="command">dig</strong></span> normally sends recursive
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater queries. Recursion is automatically disabled when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the <em class="parameter"><code>+nssearch</code></em> or
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <em class="parameter"><code>+trace</code></em> query options are used.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+retry=T</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Sets the number of times to retry UDP queries to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater server to <em class="parameter"><code>T</code></em> instead of the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater this does not include the initial query.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Toggle the display of per-record comments in the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater output (for example, human-readable key information
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater about DNSKEY records). The default is not to print
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater record comments unless multiline mode is active.
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater<dt><span class="term"><code class="option">+[no]search</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Use [do not use] the search list defined by the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater searchlist or domain directive in
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews <code class="filename">resolv.conf</code> (if any). The search
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater list is not used by default.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]short</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Provide a terse answer. The default is to print the
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater answer in a verbose form.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Perform [do not perform] a search showing intermediate
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Chase DNSSEC signature chains. Requires dig be
2da2220fe7af2c45724b50b0187523b1fab0cf08Rob Austein compiled with -DDIG_SIGCHASE.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]sit[<span class="optional">=####</span>]</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Send a Source Identity Token EDNS option, with optional
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater value. Replaying a SIT from a previous response will
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater allow the server to identify a previous client. The
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater default is <code class="option">+nosit</code>. Currently using
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater experimental value 65001 for the option code.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater<dt><span class="term"><code class="option">+split=W</code></span></dt>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater Split long hex- or base64-formatted fields in resource
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater records into chunks of <em class="parameter"><code>W</code></em>
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater characters (where <em class="parameter"><code>W</code></em> is rounded
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater up to the nearest multiple of 4).
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <em class="parameter"><code>+nosplit</code></em> or
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater <em class="parameter"><code>+split=0</code></em> causes fields not to
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater be split at all. The default is 56 characters, or
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater 44 characters when multiline mode is active.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington This query option toggles the printing of statistics:
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater when the query was made, the size of the reply and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington so on. The default behavior is to print the query
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Send an EDNS Client Subnet option with the specified
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater IP address or network prefix.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Use [do not use] TCP when querying name servers. The
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater default behavior is to use UDP unless an
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="literal">ixfr=N</code> query is requested, in which
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington case the default is TCP. AXFR queries always use
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+time=T</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Sets the timeout for a query to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>T</code></em> seconds. The default
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater timeout is 5 seconds.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater An attempt to set <em class="parameter"><code>T</code></em> to less
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater than 1 will result
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in a query timeout of 1 second being applied.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington When chasing DNSSEC signature chains perform a top-down
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater validation. Requires dig be compiled with -DDIG_SIGCHASE.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Toggle tracing of the delegation path from the root
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater name servers for the name being looked up. Tracing
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is disabled by default. When tracing is enabled,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">dig</strong></span> makes iterative queries to
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews resolve the name being looked up. It will follow
f8c47598b87a5eb5ff2ceda6c81d136212d59cefAutomatic Updater referrals from the root servers, showing the answer
7a6ad11e0185a73984410f3252f3c49c3a301dbdBrian Wellington from each server that was used to resolve the lookup.
7a6ad11e0185a73984410f3252f3c49c3a301dbdBrian Wellington <span><strong class="command">+dnssec</strong></span> is also set when +trace
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is set to better emulate the default queries from a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+tries=T</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Sets the number of times to try UDP queries to server
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to <em class="parameter"><code>T</code></em> instead of the default,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington 3. If <em class="parameter"><code>T</code></em> is less than or equal
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to zero, the number of tries is silently rounded up
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Specifies a file containing trusted keys to be used
f65d2e1c04c806a185bf9f3120e80692f5ccd5e6Automatic Updater with <code class="option">+sigchase</code>. Each DNSKEY record
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington must be on its own line.
bbb069be941f649228760edcc241122933c066d2Automatic Updater If not specified, <span><strong class="command">dig</strong></span> will look
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington for <code class="filename">/etc/trusted-key.key</code> then
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater <code class="filename">trusted-key.key</code> in the current
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Requires dig be compiled with -DDIG_SIGCHASE.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
3e79333aa37d3b88959372431a02af8a3eb7cfd9Automatic Updater Display [do not display] the TTL when printing the
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Display [do not display] the TTL in friendly human-readable
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater time units of "s", "m", "h", "d", and "w", representing
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater seconds, minutes, hours, days and weeks. Implies +ttlid.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Use [do not use] TCP when querying name servers. This
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is provided for backwards compatibility. The "vc"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater stands for "virtual circuit".
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2545276"></a><h2>MULTIPLE QUERIES</h2>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The BIND 9 implementation of <span><strong class="command">dig </strong></span>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater specifying multiple queries on the command line (in addition to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater supporting the <code class="option">-f</code> batch file option). Each of those
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington queries can be supplied with its own set of flags, options and query
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington In this case, each <em class="parameter"><code>query</code></em> argument
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews individual query in the command-line syntax described above. Each
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews consists of any of the standard options and flags, the name to be
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews looked up, an optional query type and class and any query options that
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington should be applied to that query.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington A global set of query options, which should be applied to all queries,
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater can also be supplied. These global query options must precede the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater first tuple of name, class, type, options, flags, and query options
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater supplied on the command line. Any global query options (except
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the <code class="option">+[no]cmd</code> option) can be
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews overridden by a query-specific set of query options. For example:
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updaterdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater shows how <span><strong class="command">dig</strong></span> could be used from the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater reverse lookup of 127.0.0.1 and a query for the NS records of
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater A global query option of <em class="parameter"><code>+qr</code></em> is
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater that <span><strong class="command">dig</strong></span> shows the initial query it made
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater lookup. The final query has a local query option of
53aed64e0f8553762fc0c380ee41cb42f514c7d5Brian Wellington <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater will not print the initial query when it looks up the NS records for
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater<a name="id2545338"></a><h2>IDN SUPPORT</h2>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater domain name) support, it can accept and display non-ASCII domain names.
af3e516f771c8ba376a8cd954a7233badfce8cdcAutomatic Updater <span><strong class="command">dig</strong></span> appropriately converts character encoding of
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews domain name before sending a request to DNS server or displaying a
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews reply from the server.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews If you'd like to turn off the IDN support for some reason, defines
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews the <code class="envar">IDN_DISABLE</code> environment variable.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews The IDN support is disabled if the variable is set when
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews <span><strong class="command">dig</strong></span> runs.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews<p><code class="filename">/etc/resolv.conf</code>
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater There are probably too many query options.