mdig.html revision 6825f304c5f0cc2d4ba22fa2b6f7a431f9c1de59
11e9368a226272085c337e9e74b79808c16fbdbaTinderbox User - Copyright (C) 2015, 2016 Internet Systems Consortium, Inc. ("ISC")
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - Permission to use, copy, modify, and/or distribute this software for any
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater - purpose with or without fee is hereby granted, provided that the above
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - copyright notice and this permission notice appear in all copies.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - PERFORMANCE OF THIS SOFTWARE.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a name="man.mdig"></a><div class="titlepage"></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span class="application">mdig</span> — DNS pipelined lookup utility</p>
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<div class="cmdsynopsis"><p><code class="command">mdig</code> {@server} [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-i</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [plusopt...]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">mdig</code> {-h}</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">mdig</code> [@server] {global-opt...} {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein {local-opt...}
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p><span class="command"><strong>mdig</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is a multiple/pipelined query version of <span class="command"><strong>dig</strong></span>:
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt instead of waiting for a response after sending each query,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt it begins by sending all queries. Responses are displayed in
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the order in which they are received, not in the order the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt corresponding queries were sent.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>mdig</strong></span> options are a subset of the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>dig</strong></span> options, and are divided into "anywhere
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt options" which can occur anywhere, "global options" which must
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt occur before the query name (or they are ignored with a warning),
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt and "local options" which apply to the next query on the command
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The {@server} option is a mandatory global
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt option. It is the name or IP address of the name server to query.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt (Unlike <span class="command"><strong>dig</strong></span>, this value is not retrieved from
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <code class="filename">/etc/resolv.conf</code>.) It can be an IPv4 address
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt in dotted-decimal notation, an IPv6 address in colon-delimited
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein notation, or a hostname. When the supplied
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="parameter"><code>server</code></em> argument is a hostname,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>mdig</strong></span> resolves that name before querying
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the name server.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p><span class="command"><strong>mdig</strong></span>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt provides a number of query options which affect
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the way in which lookups are made and the results displayed. Some of
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt these set or reset flag bits in the query header, some determine which
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt sections of the answer get printed, and others determine the timeout
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt and retry strategies.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Each query option is identified by a keyword preceded by a plus
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt sign (<code class="literal">+</code>). Some keywords set or reset an
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt option. These may be preceded by the string <code class="literal">no</code>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to negate the meaning of that keyword. Other keywords assign
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt values to options like the timeout interval. They have the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-f</code> option makes <span class="command"><strong>mdig</strong></span>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt operate in batch mode by reading a list of lookup requests to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt process from the file <em class="parameter"><code>filename</code></em>. The file
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt contains a number of queries, one per line. Each entry in the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt file should be organized in the same way they would be presented
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt as queries to <span class="command"><strong>mdig</strong></span> using the command-line interface.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-h</code> causes <span class="command"><strong>mdig</strong></span> to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt print the detailed help with the full list of options and exit.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-v</code> causes <span class="command"><strong>mdig</strong></span> to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt print the version number and exit.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-4</code> option forces <span class="command"><strong>mdig</strong></span> to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt only use IPv4 query transport.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-6</code> option forces <span class="command"><strong>mdig</strong></span> to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt only use IPv6 query transport.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-b</code> option sets the source IP address of the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt query to <em class="parameter"><code>address</code></em>. This must be a valid
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt address on one of the host's network interfaces or "0.0.0.0" or
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt "::". An optional port may be specified by appending
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt "#<port>"
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-p</code> option is used when a non-standard port
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt number is to be queried.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="parameter"><code>port#</code></em> is the port number
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt that <span class="command"><strong>mdig</strong></span> will send its queries instead of
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the standard DNS port number 53. This option would be used to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt test a name server that has been configured to listen for
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt queries on a non-standard port number.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The global query options are:
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<div class="variablelist"><dl class="variablelist">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Display [do not display] the additional section of a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt reply. The default is to display it.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]all</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Set or clear all display flags.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Display [do not display] the answer section of a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt reply. The default is to display it.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Display [do not display] the authority section of a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt reply. The default is to display it.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Attempt to display the contents of messages which are
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt malformed. The default is to not display malformed
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Display [do not display] the CLASS when printing the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Toggle the display of comment lines in the output.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The default is to print comments.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Toggle the display of cryptographic fields in DNSSEC
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt records. The contents of these field are unnecessary
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to debug most DNSSEC validation failures and removing
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt them makes it easier to see the common failures. The
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt default is to display the fields. When omitted they
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt are replaced by the string "[omitted]" or in the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt DNSKEY case the key id is displayed as the replacement,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt e.g. "[ key id = value ]".
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+dscp[=value]</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Set the DSCP code point to be used when sending the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt query. Valid DSCP code points are in the range
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt [0..63]. By default no code point is explicitly set.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Print records like the SOA records in a verbose
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt multi-line format with human-readable comments. The
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt default is to print each record on a single line, to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt facilitate machine parsing of the <span class="command"><strong>mdig</strong></span>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]question</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Print [do not print] the question section of a query
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt when an answer is returned. The default is to print
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the question section as a comment.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Toggle the display of per-record comments in the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt output (for example, human-readable key information
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt about DNSKEY records). The default is not to print
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt record comments unless multiline mode is active.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]short</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Provide a terse answer. The default is to print the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt answer in a verbose form.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+split=W</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Split long hex- or base64-formatted fields in resource
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt records into chunks of <em class="parameter"><code>W</code></em>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt characters (where <em class="parameter"><code>W</code></em> is rounded
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt up to the nearest multiple of 4).
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="parameter"><code>+nosplit</code></em> or
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="parameter"><code>+split=0</code></em> causes fields not to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt be split at all. The default is 56 characters, or
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt 44 characters when multiline mode is active.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Use [do not use] TCP when querying name servers. The
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt default behavior is to use UDP.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Display [do not display] the TTL when printing the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Display [do not display] the TTL in friendly human-readable
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt time units of "s", "m", "h", "d", and "w", representing
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt seconds, minutes, hours, days and weeks. Implies +ttlid.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Use [do not use] TCP when querying name servers. This
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt is provided for backwards compatibility. The "vc"
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt stands for "virtual circuit".
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-c</code> option sets the query class to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="parameter"><code>class</code></em>. It can be any valid query class
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt which is supported in BIND 9. The default query class is "IN".
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-t</code> option sets the query type to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="parameter"><code>type</code></em>. It can be any valid query type
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt which is supported in BIND 9. The default query type is "A",
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt unless the <code class="option">-x</code> option is supplied to indicate
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt a reverse lookup with the "PTR" query type.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The <code class="option">-i</code> option sets the reverse domain for
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt IPv6 addresses to IP6.INT.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Reverse lookups — mapping addresses to names — are
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt simplified by the <code class="option">-x</code> option.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="parameter"><code>addr</code></em> is an IPv4
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt address in dotted-decimal notation, or a colon-delimited IPv6 address.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>mdig</strong></span> automatically performs a lookup for a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt query name like <code class="literal">11.12.13.10.in-addr.arpa</code> and
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt sets the query type and class to PTR and IN respectively.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt By default, IPv6 addresses are looked up using nibble format
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt under the IP6.ARPA domain. To use the older RFC1886 method
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt using the IP6.INT domain specify the <code class="option">-i</code> option.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt The local query options are:
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<div class="variablelist"><dl class="variablelist">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Sets the "aa" flag in the query.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Set [do not set] the AD (authentic data) bit in the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt query. This requests the server to return whether
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt all of the answer and authority sections have all
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt been validated as secure according to the security
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt policy of the server. AD=1 indicates that all records
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt have been validated as secure and the answer is not
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt from a OPT-OUT range. AD=0 indicate that some part
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt of the answer was insecure or not validated. This
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt bit is set by default.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Set the UDP message buffer size advertised using EDNS0
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to <em class="parameter"><code>B</code></em> bytes. The maximum and
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt minimum sizes of this buffer are 65535 and 0 respectively.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Values outside this range are rounded up or down
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt appropriately. Values other than zero will cause a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt EDNS query to be sent.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Set [do not set] the CD (checking disabled) bit in
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the query. This requests the server to not perform
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt DNSSEC validation of responses.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]cookie[<span class="optional">=####</span>]</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Send a COOKIE EDNS option, with optional value.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Replaying a COOKIE from a previous response will allow
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the server to identify a previous client. The default
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Requests DNSSEC records be sent by setting the DNSSEC
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt OK bit (DO) in the OPT record in the additional section
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt of the query.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Specify the EDNS version to query with. Valid values
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt are 0 to 255. Setting the EDNS version will cause
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt a EDNS query to be sent. <code class="option">+noedns</code>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt clears the remembered EDNS version. EDNS is set to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt 0 by default.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Set the must-be-zero EDNS flags bits (Z bits) to the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt specified value. Decimal, hex and octal encodings are
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt accepted. Setting a named flag (e.g. DO) will silently be
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt ignored. By default, no Z bits are set.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Specify EDNS option with code point <code class="option">code</code>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt and optionally payload of <code class="option">value</code> as a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt hexadecimal string. <code class="option">+noednsopt</code>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt clears the EDNS options to be sent.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Send an EDNS Expire option.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Include an EDNS name server ID request when sending
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Toggle the setting of the RD (recursion desired) bit
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt in the query. This bit is set by default, which means
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>mdig</strong></span> normally sends recursive
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+retry=T</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Sets the number of times to retry UDP queries to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt server to <em class="parameter"><code>T</code></em> instead of the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt this does not include the initial query.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]subnet=addr[/netmask]</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Send (don't send) an EDNS Client Subnet option with the
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt specified IP address or network prefix.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>mdig +subnet=0.0.0.0/0</strong></span>, or simply
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>mdig +subnet=0</strong></span> for short, sends a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Client Subnet option with an empty address and a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt source prefix length of zero, which signals a resolver
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt that the EDNS Client Subnet option should not be used
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt when resolving this query.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+timeout=T</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Sets the timeout for a query to
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <em class="parameter"><code>T</code></em> seconds. The default
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt timeout is 5 seconds for UDP transport and 10 for TCP.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt An attempt to set <em class="parameter"><code>T</code></em> to less
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt than 1 will result
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt in a query timeout of 1 second being applied.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+tries=T</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Sets the number of times to try UDP queries to server
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to <em class="parameter"><code>T</code></em> instead of the default,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt 3. If <em class="parameter"><code>T</code></em> is less than or equal
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to zero, the number of tries is silently rounded up
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+udptimeout=T</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Sets the timeout between UDP query retries.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Set [do not set] the last unassigned DNS header flag in a
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt DNS query. This flag is off by default.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>,