dig.html revision b49958b502ee45022010a0b1bed3968f598895a4
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater - Permission to use, copy, modify, and distribute this software for any
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - purpose with or without fee is hereby granted, provided that the above
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - copyright notice and this permission notice appear in all copies.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - PERFORMANCE OF THIS SOFTWARE.
ea94d370123a5892f6c47a97f21d1b28d44bb168Tinderbox User<!-- $Id: dig.html,v 1.44 2008/10/03 01:11:33 tbox Exp $ -->
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
e21a2904f02a03fa06b6db04d348f65fe9c67b2bMark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="man.dig"></a><div class="titlepage"></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span><strong class="command">dig</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (domain information groper) is a flexible tool
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for interrogating DNS name servers. It performs DNS lookups and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein displays the answers that are returned from the name server(s) that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein troubleshoot DNS problems because of its flexibility, ease of use and
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews clarity of output. Other lookup tools tend to have less functionality
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein than <span><strong class="command">dig</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Although <span><strong class="command">dig</strong></span> is normally used with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein command-line
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein arguments, it also has a batch mode of operation for reading lookup
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User requests from a file. A brief summary of its command-line arguments
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and options is printed when the <code class="option">-h</code> option is given.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Unlike earlier versions, the BIND 9 implementation of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein command line.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Unless it is told to query a specific name server,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">dig</strong></span> will try each of the servers listed
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User <code class="filename">/etc/resolv.conf</code>.
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User When no command line arguments or options are given,
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User <code class="filename">${HOME}/.digrc</code>. This file is read and
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User any options in it
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User are applied before the command line arguments.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The IN and CH class names overlap with the IN and CH top level
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein domains names. Either use the <code class="option">-t</code> and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">-c</code> options to specify the type and class,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein use the <code class="option">-q</code> the specify the domain name, or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein use "IN." and "CH." when looking up these top level domains.
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater<a name="id2543585"></a><h2>SIMPLE USAGE</h2>
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater A typical invocation of <span><strong class="command">dig</strong></span> looks like:
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater<pre class="programlisting"> dig @server name type </pre>
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User<dt><span class="term"><code class="constant">server</code></span></dt>
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User is the name or IP address of the name server to query. This can
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein address in dotted-decimal notation or an IPv6
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User address in colon-delimited notation. When the supplied
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>server</code></em> argument is a
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User <span><strong class="command">dig</strong></span> resolves that name before
c7f299247ca4460807f44b43f84ba19719646cc9Tinderbox User querying that name
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews server. If no <em class="parameter"><code>server</code></em>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein argument is provided,
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater and queries the name servers listed there. The reply from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein server that responds is displayed.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews<dt><span class="term"><code class="constant">name</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is the name of the resource record that is to be looked up.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews<dt><span class="term"><code class="constant">type</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein indicates what type of query is required —
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews ANY, A, MX, SIG, etc.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>type</code></em> can be any valid query
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews <em class="parameter"><code>type</code></em> argument is supplied,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">dig</strong></span> will perform a lookup for an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The <code class="option">-b</code> option sets the source IP address of the query
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to <em class="parameter"><code>address</code></em>. This must be a valid
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein one of the host's network interfaces or "0.0.0.0" or "::". An optional
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein may be specified by appending "#<port>"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The default query class (IN for internet) is overridden by the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein class, such as HS for Hesiod records or CH for Chaosnet records.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in batch mode by reading a list of lookup requests to process from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file <em class="parameter"><code>filename</code></em>. The file contains a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein queries, one per line. Each entry in the file should be organized in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the same way they would be presented as queries to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">dig</strong></span> using the command-line interface.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein If a non-standard port number is to be queried, the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the port number that <span><strong class="command">dig</strong></span> will send its
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein instead of the standard DNS port number 53. This option would be used
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to test a name server that has been configured to listen for queries
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein on a non-standard port number.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein use IPv4 query transport. The <code class="option">-6</code> option forces
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The <code class="option">-t</code> option sets the query type to
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <em class="parameter"><code>type</code></em>. It can be any valid query type
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews supported in BIND 9. The default query type is "A", unless the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <code class="option">-x</code> option is supplied to indicate a reverse lookup.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews A zone transfer can be requested by specifying a type of AXFR. When
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews an incremental zone transfer (IXFR) is required,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The incremental zone transfer will contain the changes made to the zone
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews since the serial number in the zone's SOA record was
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The <code class="option">-q</code> option sets the query name to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>name</code></em>. This useful do distinguish the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>name</code></em> from other arguments.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Reverse lookups — mapping addresses to names — are simplified by the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein address in dotted-decimal notation, or a colon-delimited IPv6 address.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein When this option is used, there is no need to provide the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein automatically performs a lookup for a name like
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater query type and
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater class to PTR and IN respectively. By default, IPv6 addresses are
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater looked up using nibble format under the IP6.ARPA domain.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater To use the older RFC1886 method using the IP6.INT domain
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater are now experimental and are not attempted.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater responses using transaction signatures (TSIG), specify a TSIG key file
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater using the <code class="option">-k</code> option. You can also specify the TSIG
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater key itself on the command line using the <code class="option">-y</code> option;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>name</code></em> is the name of the TSIG key and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>key</code></em> is the actual key. The key is a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein encoded string, typically generated by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Caution should be taken when using the <code class="option">-y</code> option on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein multi-user systems as the key can be visible in the output from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or in the shell's history file. When
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein server that is queried needs to know the key and algorithm that is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein being used. In BIND, this is done by providing appropriate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span><strong class="command">dig</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein provides a number of query options which affect
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the way in which lookups are made and the results displayed. Some of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein these set or reset flag bits in the query header, some determine which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sections of the answer get printed, and others determine the timeout
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and retry strategies.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Each query option is identified by a keyword preceded by a plus sign
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (<code class="literal">+</code>). Some keywords set or reset an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein option. These may be preceded
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by the string <code class="literal">no</code> to negate the meaning of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein that keyword. Other
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keywords assign values to options like the timeout interval. They
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein have the form <code class="option">+keyword=value</code>.
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews The query options are:
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews Use [do not use] TCP when querying name servers. The default
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews behavior is to use UDP unless an AXFR or IXFR query is
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews requested, in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein which case a TCP connection is used.
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Use [do not use] TCP when querying name servers. This alternate
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews syntax to <em class="parameter"><code>+[no]tcp</code></em> is
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews provided for backwards
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews compatibility. The "vc" stands for "virtual circuit".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Ignore truncation in UDP responses instead of retrying with TCP.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein default, TCP retries are performed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Set the search list to contain the single domain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>somename</code></em>, as if specified in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">domain</strong></span> directive in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="filename">/etc/resolv.conf</code>, and enable
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein processing as if the <em class="parameter"><code>+search</code></em>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein option were given.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]search</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Use [do not use] the search list defined by the searchlist or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein directive in <code class="filename">resolv.conf</code> (if
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews The search list is not used by default.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews Perform [do not perform] a search showing intermediate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Sets the "aa" flag in the query.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Set [do not set] the AD (authentic data) bit in the query. The
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein currently has a standard meaning only in responses, not in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein but the ability to set the bit in the query is provided for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein completeness.
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews Set [do not set] the CD (checking disabled) bit in the query.
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews requests the server to not perform DNSSEC validation of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Display [do not display] the CLASS when printing the record.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Display [do not display] the TTL when printing the record.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Toggle the setting of the RD (recursion desired) bit in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein This bit is set by default, which means <span><strong class="command">dig</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein normally sends recursive queries. Recursion is automatically
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when the <em class="parameter"><code>+nssearch</code></em> or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>+trace</code></em> query options are
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein When this option is set, <span><strong class="command">dig</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein attempts to find the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein authoritative name servers for the zone containing the name
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein looked up and display the SOA record that each name server has
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Toggle tracing of the delegation path from the root name servers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the name being looked up. Tracing is disabled by default. When
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein tracing is enabled, <span><strong class="command">dig</strong></span> makes
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein iterative queries to
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews resolve the name being looked up. It will follow referrals from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein root servers, showing the answer from each server that was used
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein resolve the lookup.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Toggles the printing of the initial comment in the output
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the version of <span><strong class="command">dig</strong></span> and the query
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein options that have
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein been applied. This comment is printed by default.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]short</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Provide a terse answer. The default is to print the answer in a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein verbose form.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater Show [or do not show] the IP address and port number that
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater answer when the <em class="parameter"><code>+short</code></em> option
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater is enabled. If
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater short form answers are requested, the default is not to show the
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater source address and port number of the server that provided the
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater Toggle the display of comment lines in the output. The default
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater print comments.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater This query option toggles the printing of statistics: when the
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater was made, the size of the reply and so on. The default
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater to print the query statistics.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater Print [do not print] the query as it is sent.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater By default, the query is not printed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]question</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Print [do not print] the question section of a query when an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein returned. The default is to print the question section as a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Display [do not display] the answer section of a reply. The
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is to display it.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Display [do not display] the authority section of a reply. The
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein default is to display it.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Display [do not display] the additional section of a reply.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The default is to display it.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]all</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Set or clear all display flags.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+time=T</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Sets the timeout for a query to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>T</code></em> seconds. The default
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein timeout is 5 seconds.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein An attempt to set <em class="parameter"><code>T</code></em> to less
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein than 1 will result
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in a query timeout of 1 second being applied.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+tries=T</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Sets the number of times to try UDP queries to server to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>T</code></em> instead of the default, 3.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>T</code></em> is less than or equal to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zero, the number of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein tries is silently rounded up to 1.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+retry=T</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Sets the number of times to retry UDP queries to server to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>T</code></em> instead of the default, 2.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>+tries</code></em>, this does not include
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Set the number of dots that have to appear in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein considered absolute. The default value is that defined using
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ndots statement is present. Names with fewer dots are
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein interpreted as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein relative names and will be searched for in the domains listed in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">search</code> or <code class="option">domain</code> directive in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Set the UDP message buffer size advertised using EDNS0 to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of this buffer are 65535 and 0 respectively. Values outside
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein this range are rounded up or down appropriately.
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User Values other than zero will cause a EDNS query to be sent.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+edns=#</code></span></dt>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Specify the EDNS version to query with. Valid values
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are 0 to 255. Setting the EDNS version will cause a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein EDNS query to be sent. <code class="option">+noedns</code> clears the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein remembered EDNS version.
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Print records like the SOA records in a verbose multi-line
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein format with human-readable comments. The default is to print
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein each record on a single line, to facilitate machine parsing
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews of the <span><strong class="command">dig</strong></span> output.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Do not try the next server if you receive a SERVFAIL. The
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to not try the next server which is the reverse of normal stub
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Attempt to display the contents of messages which are malformed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The default is to not display malformed answers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Requests DNSSEC records be sent by setting the DNSSEC OK bit
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews in the OPT record in the additional section of the query.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Chase DNSSEC signature chains. Requires dig be compiled with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein -DDIG_SIGCHASE.
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Specifies a file containing trusted keys to be used with
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews <code class="option">+sigchase</code>. Each DNSKEY record must be
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews on its own line.
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews If not specified <span><strong class="command">dig</strong></span> will look for
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews <code class="filename">/etc/trusted-key.key</code> then
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="filename">trusted-key.key</code> in the current directory.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Requires dig be compiled with -DDIG_SIGCHASE.
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews When chasing DNSSEC signature chains perform a top-down
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews Requires dig be compiled with -DDIG_SIGCHASE.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews Include an EDNS name server ID request when sending a query.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="id2545149"></a><h2>MULTIPLE QUERIES</h2>
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater The BIND 9 implementation of <span><strong class="command">dig </strong></span>
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews specifying multiple queries on the command line (in addition to
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews supporting the <code class="option">-f</code> batch file option). Each of those
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews queries can be supplied with its own set of flags, options and query
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews In this case, each <em class="parameter"><code>query</code></em> argument
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews represent an
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews individual query in the command-line syntax described above. Each
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews consists of any of the standard options and flags, the name to be
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews looked up, an optional query type and class and any query options that
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews should be applied to that query.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A global set of query options, which should be applied to all queries,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein can also be supplied. These global query options must precede the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein first tuple of name, class, type, options, flags, and query options
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User supplied on the command line. Any global query options (except
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the <code class="option">+[no]cmd</code> option) can be
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews overridden by a query-specific set of query options. For example:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austeindig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein shows how <span><strong class="command">dig</strong></span> could be used from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein command line
bec154197d3d640b0d5b416cd5218ea58dca5d3aTinderbox User to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reverse lookup of 127.0.0.1 and a query for the NS records of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A global query option of <em class="parameter"><code>+qr</code></em> is
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews that <span><strong class="command">dig</strong></span> shows the initial query it made
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lookup. The final query has a local query option of
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater will not print the initial query when it looks up the NS records for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews domain name) support, it can accept and display non-ASCII domain names.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews <span><strong class="command">dig</strong></span> appropriately converts character encoding of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein domain name before sending a request to DNS server or displaying a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reply from the server.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein If you'd like to turn off the IDN support for some reason, defines
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the <code class="envar">IDN_DISABLE</code> environment variable.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The IDN support is disabled if the variable is set when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">dig</strong></span> runs.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><code class="filename">/etc/resolv.conf</code>
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein There are probably too many query options.