dig.html revision cedb0bd0c1e3c461b7e479a16d3adfd5b150f1f4
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - Copyright (C) 2004, 2005 Internet Systems Consortium, Inc. ("ISC")
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - Permission to use, copy, modify, and distribute this software for any
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - purpose with or without fee is hereby granted, provided that the above
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - copyright notice and this permission notice appear in all copies.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
f0ab104f070bc7f569404826fea1828ed985638cvboxsync - PERFORMANCE OF THIS SOFTWARE.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<!-- $Id: dig.html,v 1.29 2005/10/13 03:13:57 marka Exp $ -->
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<p><span><strong class="command">dig</strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync (domain information groper) is a flexible tool
f0ab104f070bc7f569404826fea1828ed985638cvboxsync for interrogating DNS name servers. It performs DNS lookups and
f0ab104f070bc7f569404826fea1828ed985638cvboxsync displays the answers that are returned from the name server(s) that
f0ab104f070bc7f569404826fea1828ed985638cvboxsync were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync troubleshoot DNS problems because of its flexibility, ease of use and
f0ab104f070bc7f569404826fea1828ed985638cvboxsync clarity of output. Other lookup tools tend to have less functionality
f0ab104f070bc7f569404826fea1828ed985638cvboxsync than <span><strong class="command">dig</strong></span>.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Although <span><strong class="command">dig</strong></span> is normally used with
f0ab104f070bc7f569404826fea1828ed985638cvboxsync command-line
f0ab104f070bc7f569404826fea1828ed985638cvboxsync arguments, it also has a batch mode of operation for reading lookup
f0ab104f070bc7f569404826fea1828ed985638cvboxsync requests from a file. A brief summary of its command-line arguments
f0ab104f070bc7f569404826fea1828ed985638cvboxsync and options is printed when the <code class="option">-h</code> option is given.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Unlike earlier versions, the BIND9 implementation of
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
f0ab104f070bc7f569404826fea1828ed985638cvboxsync command line.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Unless it is told to query a specific name server,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> will try each of the servers listed
f0ab104f070bc7f569404826fea1828ed985638cvboxsync When no command line arguments or options are given, will perform an
f0ab104f070bc7f569404826fea1828ed985638cvboxsync NS query for "." (the root).
f0ab104f070bc7f569404826fea1828ed985638cvboxsync It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="filename">${HOME}/.digrc</code>. This file is read and
f0ab104f070bc7f569404826fea1828ed985638cvboxsync any options in it
f0ab104f070bc7f569404826fea1828ed985638cvboxsync are applied before the command line arguments.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync A typical invocation of <span><strong class="command">dig</strong></span> looks like:
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<pre class="programlisting"> dig @server name type </pre>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="constant">server</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync is the name or IP address of the name server to query. This can
f0ab104f070bc7f569404826fea1828ed985638cvboxsync address in dotted-decimal notation or an IPv6
f0ab104f070bc7f569404826fea1828ed985638cvboxsync address in colon-delimited notation. When the supplied
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>server</code></em> argument is a
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> resolves that name before
f0ab104f070bc7f569404826fea1828ed985638cvboxsync querying that name
f0ab104f070bc7f569404826fea1828ed985638cvboxsync server. If no <em class="parameter"><code>server</code></em>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync argument is provided,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync and queries the name servers listed there. The reply from the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync server that responds is displayed.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="constant">name</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync is the name of the resource record that is to be looked up.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="constant">type</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync indicates what type of query is required —
f0ab104f070bc7f569404826fea1828ed985638cvboxsync ANY, A, MX, SIG, etc.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>type</code></em> can be any valid query
f0ab104f070bc7f569404826fea1828ed985638cvboxsync type. If no
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>type</code></em> argument is supplied,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> will perform a lookup for an
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The <code class="option">-b</code> option sets the source IP address of the query
f0ab104f070bc7f569404826fea1828ed985638cvboxsync to <em class="parameter"><code>address</code></em>. This must be a valid
f0ab104f070bc7f569404826fea1828ed985638cvboxsync one of the host's network interfaces or "0.0.0.0" or "::". An optional
f0ab104f070bc7f569404826fea1828ed985638cvboxsync may be specified by appending "#<port>"
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The default query class (IN for internet) is overridden by the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
f0ab104f070bc7f569404826fea1828ed985638cvboxsync class, such as HS for Hesiod records or CH for CHAOSNET records.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync in batch mode by reading a list of lookup requests to process from the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync file <em class="parameter"><code>filename</code></em>. The file contains a
f0ab104f070bc7f569404826fea1828ed985638cvboxsync queries, one per line. Each entry in the file should be organised in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync the same way they would be presented as queries to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> using the command-line interface.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync If a non-standard port number is to be queried, the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
f0ab104f070bc7f569404826fea1828ed985638cvboxsync the port number that <span><strong class="command">dig</strong></span> will send its
f0ab104f070bc7f569404826fea1828ed985638cvboxsync instead of the standard DNS port number 53. This option would be used
f0ab104f070bc7f569404826fea1828ed985638cvboxsync to test a name server that has been configured to listen for queries
f0ab104f070bc7f569404826fea1828ed985638cvboxsync on a non-standard port number.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync use IPv4 query transport. The <code class="option">-6</code> option forces
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The <code class="option">-t</code> option sets the query type to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>type</code></em>. It can be any valid query type
f0ab104f070bc7f569404826fea1828ed985638cvboxsync supported in BIND9. The default query type "A", unless the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="option">-x</code> option is supplied to indicate a reverse lookup.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync A zone transfer can be requested by specifying a type of AXFR. When
f0ab104f070bc7f569404826fea1828ed985638cvboxsync an incremental zone transfer (IXFR) is required,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The incremental zone transfer will contain the changes made to the zone
f0ab104f070bc7f569404826fea1828ed985638cvboxsync since the serial number in the zone's SOA record was
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The <code class="option">-q</code> option sets the query name to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>name</code></em>. This useful do distingish the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>name</code></em> from other arguements.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Reverse lookups - mapping addresses to names - are simplified by the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
f0ab104f070bc7f569404826fea1828ed985638cvboxsync address in dotted-decimal notation, or a colon-delimited IPv6 address.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync When this option is used, there is no need to provide the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync automatically performs a lookup for a name like
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync query type and
f0ab104f070bc7f569404826fea1828ed985638cvboxsync class to PTR and IN respectively. By default, IPv6 addresses are
f0ab104f070bc7f569404826fea1828ed985638cvboxsync looked up using nibble format under the IP6.ARPA domain.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync To use the older RFC1886 method using the IP6.INT domain
f0ab104f070bc7f569404826fea1828ed985638cvboxsync specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
f0ab104f070bc7f569404826fea1828ed985638cvboxsync are now experimental and are not attempted.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
f0ab104f070bc7f569404826fea1828ed985638cvboxsync responses using transaction signatures (TSIG), specify a TSIG key file
f0ab104f070bc7f569404826fea1828ed985638cvboxsync using the <code class="option">-k</code> option. You can also specify the TSIG
f0ab104f070bc7f569404826fea1828ed985638cvboxsync key itself on the command line using the <code class="option">-y</code> option;
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>name</code></em> is the name of the TSIG key and
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>key</code></em> is the actual key. The key is a
f0ab104f070bc7f569404826fea1828ed985638cvboxsync encoded string, typically generated by
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Caution should be taken when using the <code class="option">-y</code> option on
f0ab104f070bc7f569404826fea1828ed985638cvboxsync multi-user systems as the key can be visible in the output from
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync or in the shell's history file. When
f0ab104f070bc7f569404826fea1828ed985638cvboxsync using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
f0ab104f070bc7f569404826fea1828ed985638cvboxsync server that is queried needs to know the key and algorithm that is
f0ab104f070bc7f569404826fea1828ed985638cvboxsync being used. In BIND, this is done by providing appropriate
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<p><span><strong class="command">dig</strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync provides a number of query options which affect
f0ab104f070bc7f569404826fea1828ed985638cvboxsync the way in which lookups are made and the results displayed. Some of
f0ab104f070bc7f569404826fea1828ed985638cvboxsync these set or reset flag bits in the query header, some determine which
f0ab104f070bc7f569404826fea1828ed985638cvboxsync sections of the answer get printed, and others determine the timeout
f0ab104f070bc7f569404826fea1828ed985638cvboxsync and retry strategies.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Each query option is identified by a keyword preceded by a plus sign
f0ab104f070bc7f569404826fea1828ed985638cvboxsync (<code class="literal">+</code>). Some keywords set or reset an
f0ab104f070bc7f569404826fea1828ed985638cvboxsync option. These may be preceded
f0ab104f070bc7f569404826fea1828ed985638cvboxsync by the string <code class="literal">no</code> to negate the meaning of
f0ab104f070bc7f569404826fea1828ed985638cvboxsync that keyword. Other
f0ab104f070bc7f569404826fea1828ed985638cvboxsync keywords assign values to options like the timeout interval. They
f0ab104f070bc7f569404826fea1828ed985638cvboxsync have the form <code class="option">+keyword=value</code>.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The query options are:
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Use [do not use] TCP when querying name servers. The default
f0ab104f070bc7f569404826fea1828ed985638cvboxsync behaviour is to use UDP unless an AXFR or IXFR query is
f0ab104f070bc7f569404826fea1828ed985638cvboxsync requested, in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync which case a TCP connection is used.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Use [do not use] TCP when querying name servers. This alternate
f0ab104f070bc7f569404826fea1828ed985638cvboxsync syntax to <em class="parameter"><code>+[no]tcp</code></em> is
f0ab104f070bc7f569404826fea1828ed985638cvboxsync provided for backwards
f0ab104f070bc7f569404826fea1828ed985638cvboxsync compatibility. The "vc" stands for "virtual circuit".
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Ignore truncation in UDP responses instead of retrying with TCP.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync default, TCP retries are performed.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Set the search list to contain the single domain
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>somename</code></em>, as if specified in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">domain</strong></span> directive in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="filename">/etc/resolv.conf</code>, and enable
f0ab104f070bc7f569404826fea1828ed985638cvboxsync search list
f0ab104f070bc7f569404826fea1828ed985638cvboxsync processing as if the <em class="parameter"><code>+search</code></em>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync option were given.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]search</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Use [do not use] the search list defined by the searchlist or
f0ab104f070bc7f569404826fea1828ed985638cvboxsync directive in <code class="filename">resolv.conf</code> (if
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The search list is not used by default.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Perform [do not perform] a search showing intermediate
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Sets the "aa" flag in the query.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Set [do not set] the AD (authentic data) bit in the query. The
f0ab104f070bc7f569404826fea1828ed985638cvboxsync currently has a standard meaning only in responses, not in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync but the ability to set the bit in the query is provided for
f0ab104f070bc7f569404826fea1828ed985638cvboxsync completeness.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Set [do not set] the CD (checking disabled) bit in the query.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync requests the server to not perform DNSSEC validation of
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Display [do not display] the CLASS when printing the record.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Display [do not display] the TTL when printing the record.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Toggle the setting of the RD (recursion desired) bit in the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync This bit is set by default, which means <span><strong class="command">dig</strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync normally sends recursive queries. Recursion is automatically
f0ab104f070bc7f569404826fea1828ed985638cvboxsync when the <em class="parameter"><code>+nssearch</code></em> or
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>+trace</code></em> query options are
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync When this option is set, <span><strong class="command">dig</strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync attempts to find the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync authoritative name servers for the zone containing the name
f0ab104f070bc7f569404826fea1828ed985638cvboxsync looked up and display the SOA record that each name server has
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Toggle tracing of the delegation path from the root name servers
f0ab104f070bc7f569404826fea1828ed985638cvboxsync the name being looked up. Tracing is disabled by default. When
f0ab104f070bc7f569404826fea1828ed985638cvboxsync tracing is enabled, <span><strong class="command">dig</strong></span> makes
f0ab104f070bc7f569404826fea1828ed985638cvboxsync iterative queries to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync resolve the name being looked up. It will follow referrals from
f0ab104f070bc7f569404826fea1828ed985638cvboxsync root servers, showing the answer from each server that was used
f0ab104f070bc7f569404826fea1828ed985638cvboxsync resolve the lookup.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync toggles the printing of the initial comment in the output
f0ab104f070bc7f569404826fea1828ed985638cvboxsync identifying
f0ab104f070bc7f569404826fea1828ed985638cvboxsync the version of <span><strong class="command">dig</strong></span> and the query
f0ab104f070bc7f569404826fea1828ed985638cvboxsync options that have
f0ab104f070bc7f569404826fea1828ed985638cvboxsync been applied. This comment is printed by default.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]short</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Provide a terse answer. The default is to print the answer in a
f0ab104f070bc7f569404826fea1828ed985638cvboxsync verbose form.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Show [or do not show] the IP address and port number that
f0ab104f070bc7f569404826fea1828ed985638cvboxsync supplied the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync answer when the <em class="parameter"><code>+short</code></em> option
f0ab104f070bc7f569404826fea1828ed985638cvboxsync is enabled. If
f0ab104f070bc7f569404826fea1828ed985638cvboxsync short form answers are requested, the default is not to show the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync source address and port number of the server that provided the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Toggle the display of comment lines in the output. The default
f0ab104f070bc7f569404826fea1828ed985638cvboxsync print comments.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync This query option toggles the printing of statistics: when the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync was made, the size of the reply and so on. The default
f0ab104f070bc7f569404826fea1828ed985638cvboxsync behaviour is
f0ab104f070bc7f569404826fea1828ed985638cvboxsync to print the query statistics.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Print [do not print] the query as it is sent.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync By default, the query is not printed.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]question</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Print [do not print] the question section of a query when an
f0ab104f070bc7f569404826fea1828ed985638cvboxsync returned. The default is to print the question section as a
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Display [do not display] the answer section of a reply. The
f0ab104f070bc7f569404826fea1828ed985638cvboxsync is to display it.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Display [do not display] the authority section of a reply. The
f0ab104f070bc7f569404826fea1828ed985638cvboxsync default is to display it.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Display [do not display] the additional section of a reply.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The default is to display it.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]all</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Set or clear all display flags.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+time=T</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Sets the timeout for a query to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>T</code></em> seconds. The default time
f0ab104f070bc7f569404826fea1828ed985638cvboxsync out is 5 seconds.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync An attempt to set <em class="parameter"><code>T</code></em> to less
f0ab104f070bc7f569404826fea1828ed985638cvboxsync than 1 will result
f0ab104f070bc7f569404826fea1828ed985638cvboxsync in a query timeout of 1 second being applied.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+tries=T</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Sets the number of times to try UDP queries to server to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>T</code></em> instead of the default, 3.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>T</code></em> is less than or equal to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync zero, the number of
f0ab104f070bc7f569404826fea1828ed985638cvboxsync tries is silently rounded up to 1.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+retry=T</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Sets the number of times to retry UDP queries to server to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>T</code></em> instead of the default, 2.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>+tries</code></em>, this does not include
f0ab104f070bc7f569404826fea1828ed985638cvboxsync the initial
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Set the number of dots that have to appear in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
f0ab104f070bc7f569404826fea1828ed985638cvboxsync considered absolute. The default value is that defined using
f0ab104f070bc7f569404826fea1828ed985638cvboxsync ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
f0ab104f070bc7f569404826fea1828ed985638cvboxsync ndots statement is present. Names with fewer dots are
f0ab104f070bc7f569404826fea1828ed985638cvboxsync interpreted as
f0ab104f070bc7f569404826fea1828ed985638cvboxsync relative names and will be searched for in the domains listed in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="option">search</code> or <code class="option">domain</code> directive in
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Set the UDP message buffer size advertised using EDNS0 to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
f0ab104f070bc7f569404826fea1828ed985638cvboxsync of this buffer are 65535 and 0 respectively. Values outside
f0ab104f070bc7f569404826fea1828ed985638cvboxsync this range are rounded up or down appropriately.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Values other than zero will cause a EDNS query to be sent.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+edns=#</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Specify the EDNS version to query with. Valid values
f0ab104f070bc7f569404826fea1828ed985638cvboxsync are 0 to 255. Setting the EDNS version will cause a
f0ab104f070bc7f569404826fea1828ed985638cvboxsync EDNS query to be sent. <code class="option">+noedns</code> clears the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync remembered EDNS version.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Print records like the SOA records in a verbose multi-line
f0ab104f070bc7f569404826fea1828ed985638cvboxsync format with human-readable comments. The default is to print
f0ab104f070bc7f569404826fea1828ed985638cvboxsync each record on a single line, to facilitate machine parsing
f0ab104f070bc7f569404826fea1828ed985638cvboxsync of the <span><strong class="command">dig</strong></span> output.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Do not try the next server if you receive a SERVFAIL. The
f0ab104f070bc7f569404826fea1828ed985638cvboxsync to not try the next server which is the reverse of normal stub
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Attempt to display the contents of messages which are malformed.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The default is to not display malformed answers.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Requests DNSSEC records be sent by setting the DNSSEC OK bit
f0ab104f070bc7f569404826fea1828ed985638cvboxsync in the OPT record in the additional section of the query.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Chase DNSSEC signature chains. Requires dig be compiled with
f0ab104f070bc7f569404826fea1828ed985638cvboxsync -DDIG_SIGCHASE.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Specifies a file containing trusted keys to be used with
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="option">+sigchase</code>. Each DNSKEY record must be
f0ab104f070bc7f569404826fea1828ed985638cvboxsync on its own line.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync If not specified <span><strong class="command">dig</strong></span> will look for
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="filename">/etc/trusted-key.key</code> then
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <code class="filename">trusted-key.key</code> in the current directory.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Requires dig be compiled with -DDIG_SIGCHASE.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync When chasing DNSSEC signature chains perform a top down
f0ab104f070bc7f569404826fea1828ed985638cvboxsync validation.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync Requires dig be compiled with -DDIG_SIGCHASE.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The BIND 9 implementation of <span><strong class="command">dig </strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync specifying multiple queries on the command line (in addition to
f0ab104f070bc7f569404826fea1828ed985638cvboxsync supporting the <code class="option">-f</code> batch file option). Each of those
f0ab104f070bc7f569404826fea1828ed985638cvboxsync queries can be supplied with its own set of flags, options and query
f0ab104f070bc7f569404826fea1828ed985638cvboxsync In this case, each <em class="parameter"><code>query</code></em> argument
f0ab104f070bc7f569404826fea1828ed985638cvboxsync represent an
f0ab104f070bc7f569404826fea1828ed985638cvboxsync individual query in the command-line syntax described above. Each
f0ab104f070bc7f569404826fea1828ed985638cvboxsync consists of any of the standard options and flags, the name to be
f0ab104f070bc7f569404826fea1828ed985638cvboxsync looked up, an optional query type and class and any query options that
f0ab104f070bc7f569404826fea1828ed985638cvboxsync should be applied to that query.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync A global set of query options, which should be applied to all queries,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync can also be supplied. These global query options must precede the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync first tuple of name, class, type, options, flags, and query options
f0ab104f070bc7f569404826fea1828ed985638cvboxsync supplied on the command line. Any global query options (except
f0ab104f070bc7f569404826fea1828ed985638cvboxsync the <code class="option">+[no]cmd</code> option) can be
f0ab104f070bc7f569404826fea1828ed985638cvboxsync overridden by a query-specific set of query options. For example:
f0ab104f070bc7f569404826fea1828ed985638cvboxsyncdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
f0ab104f070bc7f569404826fea1828ed985638cvboxsync shows how <span><strong class="command">dig</strong></span> could be used from the
f0ab104f070bc7f569404826fea1828ed985638cvboxsync command line
f0ab104f070bc7f569404826fea1828ed985638cvboxsync to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
f0ab104f070bc7f569404826fea1828ed985638cvboxsync reverse lookup of 127.0.0.1 and a query for the NS records of
f0ab104f070bc7f569404826fea1828ed985638cvboxsync A global query option of <em class="parameter"><code>+qr</code></em> is
f0ab104f070bc7f569404826fea1828ed985638cvboxsync applied, so
f0ab104f070bc7f569404826fea1828ed985638cvboxsync that <span><strong class="command">dig</strong></span> shows the initial query it made
f0ab104f070bc7f569404826fea1828ed985638cvboxsync lookup. The final query has a local query option of
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
f0ab104f070bc7f569404826fea1828ed985638cvboxsync will not print the initial query when it looks up the NS records for
f0ab104f070bc7f569404826fea1828ed985638cvboxsync If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
f0ab104f070bc7f569404826fea1828ed985638cvboxsync domain name) support, it can accept and display non-ASCII domain names.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> appropriately converts character encoding of
f0ab104f070bc7f569404826fea1828ed985638cvboxsync domain name before sending a request to DNS server or displaying a
f0ab104f070bc7f569404826fea1828ed985638cvboxsync reply from the server.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync If you'd like to turn off the IDN support for some reason, defines
f0ab104f070bc7f569404826fea1828ed985638cvboxsync the <code class="envar">IDN_DISABLE</code> environment variable.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync The IDN support is disabled if the variable is set when
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span><strong class="command">dig</strong></span> runs.
f0ab104f070bc7f569404826fea1828ed985638cvboxsync<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
f0ab104f070bc7f569404826fea1828ed985638cvboxsync There are probably too many query options.