mdig.html revision ea640e04eae220b5e569f188563eb1f204c7c77e
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
6825f304c5f0cc2d4ba22fa2b6f7a431f9c1de59Tinderbox User - Copyright (C) 2015, 2016 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - This Source Code Form is subject to the terms of the Mozilla Public
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - License, v. 2.0. If a copy of the MPL was not distributed with this
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - file, You can obtain one at http://mozilla.org/MPL/2.0/.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<a name="man.mdig"></a><div class="titlepage"></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="application">mdig</span> — DNS pipelined lookup utility</p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="cmdsynopsis"><p><code class="command">mdig</code> {@server} [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-i</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [plusopt...]</p></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="cmdsynopsis"><p><code class="command">mdig</code> {-h}</p></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="cmdsynopsis"><p><code class="command">mdig</code> [@server] {global-opt...} {
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont {local-opt...}
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="command"><strong>mdig</strong></span>
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User is a multiple/pipelined query version of <span class="command"><strong>dig</strong></span>:
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User instead of waiting for a response after sending each query,
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User it begins by sending all queries. Responses are displayed in
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User the order in which they are received, not in the order the
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User corresponding queries were sent.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="command"><strong>mdig</strong></span> options are a subset of the
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="command"><strong>dig</strong></span> options, and are divided into "anywhere
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User options" which can occur anywhere, "global options" which must
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User occur before the query name (or they are ignored with a warning),
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User and "local options" which apply to the next query on the command
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User The {@server} option is a mandatory global
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User option. It is the name or IP address of the name server to query.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User (Unlike <span class="command"><strong>dig</strong></span>, this value is not retrieved from
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User <code class="filename">/etc/resolv.conf</code>.) It can be an IPv4 address
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User in dotted-decimal notation, an IPv6 address in colon-delimited
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User notation, or a hostname. When the supplied
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont <em class="parameter"><code>server</code></em> argument is a hostname,
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="command"><strong>mdig</strong></span> resolves that name before querying
de283bda6a902c2102a795192eeab3a769001c7dTinderbox User the name server.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="command"><strong>mdig</strong></span>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont provides a number of query options which affect
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont the way in which lookups are made and the results displayed. Some of
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont these set or reset flag bits in the query header, some determine which
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont sections of the answer get printed, and others determine the timeout
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont and retry strategies.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Each query option is identified by a keyword preceded by a plus
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont sign (<code class="literal">+</code>). Some keywords set or reset an
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont option. These may be preceded by the string <code class="literal">no</code>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont to negate the meaning of that keyword. Other keywords assign
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont values to options like the timeout interval. They have the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont form <code class="option">+keyword=value</code>.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<a name="id-1.8"></a><h2>ANYWHERE OPTIONS</h2>
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User The <code class="option">-f</code> option makes <span class="command"><strong>mdig</strong></span>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont operate in batch mode by reading a list of lookup requests to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont process from the file <em class="parameter"><code>filename</code></em>. The file
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont contains a number of queries, one per line. Each entry in the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont file should be organized in the same way they would be presented
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User as queries to <span class="command"><strong>mdig</strong></span> using the command-line interface.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User The <code class="option">-h</code> causes <span class="command"><strong>mdig</strong></span> to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont print the detailed help with the full list of options and exit.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User The <code class="option">-v</code> causes <span class="command"><strong>mdig</strong></span> to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont print the version number and exit.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User The <code class="option">-4</code> option forces <span class="command"><strong>mdig</strong></span> to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont only use IPv4 query transport.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User The <code class="option">-6</code> option forces <span class="command"><strong>mdig</strong></span> to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont only use IPv6 query transport.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont The <code class="option">-b</code> option sets the source IP address of the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont query to <em class="parameter"><code>address</code></em>. This must be a valid
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont address on one of the host's network interfaces or "0.0.0.0" or
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont "::". An optional port may be specified by appending
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont "#<port>"
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont The <code class="option">-p</code> option is used when a non-standard port
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont number is to be queried.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont <em class="parameter"><code>port#</code></em> is the port number
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User that <span class="command"><strong>mdig</strong></span> will send its queries instead of
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont the standard DNS port number 53. This option would be used to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont test a name server that has been configured to listen for
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont queries on a non-standard port number.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont The global query options are:
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="variablelist"><dl class="variablelist">
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Display [do not display] the additional section of a
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont reply. The default is to display it.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]all</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Set or clear all display flags.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Display [do not display] the answer section of a
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont reply. The default is to display it.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Display [do not display] the authority section of a
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont reply. The default is to display it.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Attempt to display the contents of messages which are
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont malformed. The default is to not display malformed
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Display [do not display] the CLASS when printing the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Toggle the display of comment lines in the output.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont The default is to print comments.
ea640e04eae220b5e569f188563eb1f204c7c77eTinderbox User<dt><span class="term"><code class="option">+[no]continue</code></span></dt>
ea640e04eae220b5e569f188563eb1f204c7c77eTinderbox User Continue on errors (e.g. timeouts).
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Toggle the display of cryptographic fields in DNSSEC
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont records. The contents of these field are unnecessary
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont to debug most DNSSEC validation failures and removing
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont them makes it easier to see the common failures. The
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont default is to display the fields. When omitted they
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont are replaced by the string "[omitted]" or in the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont DNSKEY case the key id is displayed as the replacement,
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont e.g. "[ key id = value ]".
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+dscp[=value]</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Set the DSCP code point to be used when sending the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont query. Valid DSCP code points are in the range
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont [0..63]. By default no code point is explicitly set.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Print records like the SOA records in a verbose
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont multi-line format with human-readable comments. The
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont default is to print each record on a single line, to
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User facilitate machine parsing of the <span class="command"><strong>mdig</strong></span>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]question</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Print [do not print] the question section of a query
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont when an answer is returned. The default is to print
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont the question section as a comment.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Toggle the display of per-record comments in the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont output (for example, human-readable key information
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont about DNSKEY records). The default is not to print
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont record comments unless multiline mode is active.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]short</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Provide a terse answer. The default is to print the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont answer in a verbose form.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+split=W</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Split long hex- or base64-formatted fields in resource
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont records into chunks of <em class="parameter"><code>W</code></em>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont characters (where <em class="parameter"><code>W</code></em> is rounded
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont up to the nearest multiple of 4).
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont <em class="parameter"><code>+nosplit</code></em> or
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont <em class="parameter"><code>+split=0</code></em> causes fields not to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont be split at all. The default is 56 characters, or
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont 44 characters when multiline mode is active.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Use [do not use] TCP when querying name servers. The
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont default behavior is to use UDP.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Display [do not display] the TTL when printing the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Display [do not display] the TTL in friendly human-readable
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont time units of "s", "m", "h", "d", and "w", representing
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont seconds, minutes, hours, days and weeks. Implies +ttlid.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Use [do not use] TCP when querying name servers. This
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont is provided for backwards compatibility. The "vc"
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont stands for "virtual circuit".
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont The <code class="option">-c</code> option sets the query class to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont <em class="parameter"><code>class</code></em>. It can be any valid query class
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont which is supported in BIND 9. The default query class is "IN".
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont The <code class="option">-t</code> option sets the query type to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont <em class="parameter"><code>type</code></em>. It can be any valid query type
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont which is supported in BIND 9. The default query type is "A",
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont unless the <code class="option">-x</code> option is supplied to indicate
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont a reverse lookup with the "PTR" query type.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont The <code class="option">-i</code> option sets the reverse domain for
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont IPv6 addresses to IP6.INT.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Reverse lookups — mapping addresses to names — are
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont simplified by the <code class="option">-x</code> option.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont <em class="parameter"><code>addr</code></em> is an IPv4
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont address in dotted-decimal notation, or a colon-delimited IPv6 address.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="command"><strong>mdig</strong></span> automatically performs a lookup for a
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont query name like <code class="literal">11.12.13.10.in-addr.arpa</code> and
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont sets the query type and class to PTR and IN respectively.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont By default, IPv6 addresses are looked up using nibble format
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont under the IP6.ARPA domain. To use the older RFC1886 method
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont using the IP6.INT domain specify the <code class="option">-i</code> option.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont The local query options are:
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="variablelist"><dl class="variablelist">
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Sets the "aa" flag in the query.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Set [do not set] the AD (authentic data) bit in the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont query. This requests the server to return whether
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont all of the answer and authority sections have all
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont been validated as secure according to the security
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont policy of the server. AD=1 indicates that all records
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont have been validated as secure and the answer is not
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont from a OPT-OUT range. AD=0 indicate that some part
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont of the answer was insecure or not validated. This
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont bit is set by default.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Set the UDP message buffer size advertised using EDNS0
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont to <em class="parameter"><code>B</code></em> bytes. The maximum and
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont minimum sizes of this buffer are 65535 and 0 respectively.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Values outside this range are rounded up or down
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont appropriately. Values other than zero will cause a
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont EDNS query to be sent.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Set [do not set] the CD (checking disabled) bit in
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont the query. This requests the server to not perform
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont DNSSEC validation of responses.
1879ff49326b49a9e4eadaca193c631409bf8575Tinderbox User<dt><span class="term"><code class="option">+[no]cookie[<span class="optional">=####</span>]</code></span></dt>
1879ff49326b49a9e4eadaca193c631409bf8575Tinderbox User Send a COOKIE EDNS option, with optional value.
1879ff49326b49a9e4eadaca193c631409bf8575Tinderbox User Replaying a COOKIE from a previous response will allow
1879ff49326b49a9e4eadaca193c631409bf8575Tinderbox User the server to identify a previous client. The default
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Requests DNSSEC records be sent by setting the DNSSEC
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont OK bit (DO) in the OPT record in the additional section
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont of the query.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Specify the EDNS version to query with. Valid values
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont are 0 to 255. Setting the EDNS version will cause
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont a EDNS query to be sent. <code class="option">+noedns</code>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont clears the remembered EDNS version. EDNS is set to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont 0 by default.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Set the must-be-zero EDNS flags bits (Z bits) to the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont specified value. Decimal, hex and octal encodings are
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont accepted. Setting a named flag (e.g. DO) will silently be
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont ignored. By default, no Z bits are set.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Specify EDNS option with code point <code class="option">code</code>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont and optionally payload of <code class="option">value</code> as a
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont hexadecimal string. <code class="option">+noednsopt</code>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont clears the EDNS options to be sent.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Send an EDNS Expire option.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Include an EDNS name server ID request when sending
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Toggle the setting of the RD (recursion desired) bit
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont in the query. This bit is set by default, which means
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="command"><strong>mdig</strong></span> normally sends recursive
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+retry=T</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Sets the number of times to retry UDP queries to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont server to <em class="parameter"><code>T</code></em> instead of the
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont this does not include the initial query.
e285c11870c6263cd79b418e104c7eb3e2d96952Tinderbox User<dt><span class="term"><code class="option">+[no]subnet=addr[/prefix-length]</code></span></dt>
6825f304c5f0cc2d4ba22fa2b6f7a431f9c1de59Tinderbox User Send (don't send) an EDNS Client Subnet option with the
6825f304c5f0cc2d4ba22fa2b6f7a431f9c1de59Tinderbox User specified IP address or network prefix.
6825f304c5f0cc2d4ba22fa2b6f7a431f9c1de59Tinderbox User <span class="command"><strong>mdig +subnet=0.0.0.0/0</strong></span>, or simply
e285c11870c6263cd79b418e104c7eb3e2d96952Tinderbox User <span class="command"><strong>mdig +subnet=0</strong></span> for short, sends an EDNS
e285c11870c6263cd79b418e104c7eb3e2d96952Tinderbox User client-subnet option with an empty address and a source
e285c11870c6263cd79b418e104c7eb3e2d96952Tinderbox User prefix-length of zero, which signals a resolver that
e285c11870c6263cd79b418e104c7eb3e2d96952Tinderbox User the client's address information must
e285c11870c6263cd79b418e104c7eb3e2d96952Tinderbox User <span class="emphasis"><em>not</em></span> be used when resolving
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+timeout=T</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Sets the timeout for a query to
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont <em class="parameter"><code>T</code></em> seconds. The default
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont timeout is 5 seconds for UDP transport and 10 for TCP.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont An attempt to set <em class="parameter"><code>T</code></em> to less
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont than 1 will result
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont in a query timeout of 1 second being applied.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+tries=T</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Sets the number of times to try UDP queries to server
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont to <em class="parameter"><code>T</code></em> instead of the default,
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont 3. If <em class="parameter"><code>T</code></em> is less than or equal
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont to zero, the number of tries is silently rounded up
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+udptimeout=T</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Sets the timeout between UDP query retries.
ee2e5fec653c2ccbe1531d6e0bded2218d6a76afTinderbox User<dt><span class="term"><code class="option">+[no]unknownformat</code></span></dt>
ee2e5fec653c2ccbe1531d6e0bded2218d6a76afTinderbox User Print all RDATA in unknown RR type presentation format
ee2e5fec653c2ccbe1531d6e0bded2218d6a76afTinderbox User (RFC 3597). The default is to print RDATA for known types
ee2e5fec653c2ccbe1531d6e0bded2218d6a76afTinderbox User in the type's presentation format.
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont Set [do not set] the last unassigned DNS header flag in a
7768b049c0b39662baca604ec32b32c6480f8dc6Francis Dupont DNS query. This flag is off by default.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>,