man.delv.html revision 7f18387d4b5e85a430436570a5072e41d83fa246
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Permission to use, copy, modify, and/or distribute this software for any
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - purpose with or without fee is hereby granted, provided that the above
8c225507766814e78e168b17a24b8a47ca7f8c37Tinderbox User - copyright notice and this permission notice appear in all copies.
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
1c57c3f79db0bf0358bbe6d7b5ad650c0c852f4bTinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User - PERFORMANCE OF THIS SOFTWARE.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<link rel="prev" href="man.host.html" title="host">
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<link rel="next" href="man.dnssec-checkds.html" title="dnssec-checkds">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<table width="100%" summary="Navigation header">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<tr><th colspan="3" align="center">delv</th></tr>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a accesskey="p" href="man.host.html">Prev</a>�</td>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-checkds.html">Next</a>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="man.delv"></a><div class="titlepage"></div>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<p>delv — DNS lookup and validation utility</p>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<div class="cmdsynopsis"><p><code class="command">delv</code> [@server] [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-a <em class="replaceable"><code>anchor-file</code></em></code>] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>level</code></em></code>] [<code class="option">-i</code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [name] [type] [class] [queryopt...]</p></div>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<div class="cmdsynopsis"><p><code class="command">delv</code> [<code class="option">-h</code>]</p></div>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<div class="cmdsynopsis"><p><code class="command">delv</code> [<code class="option">-v</code>]</p></div>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<div class="cmdsynopsis"><p><code class="command">delv</code> [queryopt...] [query...]</p></div>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User<p><span><strong class="command">delv</strong></span>
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User (Domain Entity Lookup & Validation) is a tool for sending
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User DNS queries and validating the results, using the the same internal
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User resolver and validator logic as <span><strong class="command">named</strong></span>.
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User <span><strong class="command">delv</strong></span> will send to a specified name server all
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User queries needed to fetch and validate the requested data; this
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User includes the original requested query, subsequent queries to follow
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User CNAME or DNAME chains, and queries for DNSKEY, DS and DLV records
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User to establish a chain of trust for DNSSEC validation.
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User It does not perform iterative resolution, but simulates the
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User behavior of a name server configured for DNSSEC validating and
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User By default, responses are validated using built-in DNSSEC trust
33c9436ef1a43d3c0fc3d9be9b4b0509daa83223Tinderbox User anchors for the root zone (".") and for the ISC DNSSEC lookaside
a1ff871f78b7d907d6fc3a382beea2a640fe8423Tinderbox User validation zone ("dlv.isc.org"). Records returned by
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">delv</strong></span> are either fully validated or
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User were not signed. If validation fails, an explanation of
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User the failure is included in the output; the validation process
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User can be traced in detail. Because <span><strong class="command">delv</strong></span> does
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User not rely on an external server to carry out validation, it can
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User be used to check the validity of DNS responses in environments
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User where local name servers may not be trustworthy.
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User Unless it is told to query a specific name server,
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User <span><strong class="command">delv</strong></span> will try each of the servers listed in
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User <code class="filename">/etc/resolv.conf</code>. If no usable server
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User addresses are found, <span><strong class="command">delv</strong></span> will send
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User queries to the localhost addresses (127.0.0.1 for IPv4, ::1
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User When no command line arguments or options are given,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">delv</strong></span> will perform an NS query for "."
8a48b6b9b6fa8486f24b22d1972b2b6ebb36a4a4Tinderbox User (the root zone).
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User A typical invocation of <span><strong class="command">delv</strong></span> looks like:
a1ff871f78b7d907d6fc3a382beea2a640fe8423Tinderbox User<pre class="programlisting"> delv @server name type </pre>
adabefa84c3dcf048566cc23fd457c577f208eeaTinderbox User<dt><span class="term"><code class="constant">server</code></span></dt>
adabefa84c3dcf048566cc23fd457c577f208eeaTinderbox User is the name or IP address of the name server to query. This
801d3c8888d6026eb1fd31c23e51e4f54dbc317eTinderbox User can be an IPv4 address in dotted-decimal notation or an IPv6
801d3c8888d6026eb1fd31c23e51e4f54dbc317eTinderbox User address in colon-delimited notation. When the supplied
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>server</code></em> argument is a hostname,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">delv</strong></span> resolves that name before
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User querying that name server (note, however, that this
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User initial lookup is <span class="emphasis"><em>not</em></span> validated
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User If no <em class="parameter"><code>server</code></em> argument is
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User provided, <span><strong class="command">delv</strong></span> consults
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <code class="filename">/etc/resolv.conf</code>; if an
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User address is found there, it queries the name server at
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User that address. If either of the <code class="option">-4</code> or
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User <code class="option">-6</code> options are in use, then
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User only addresses for the corresponding transport
eb2a5f51bd5c100799d93d51c9e22666cbd64d90Tinderbox User will be tried. If no usable addresses are found,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">delv</strong></span> will send queries to
eb2a5f51bd5c100799d93d51c9e22666cbd64d90Tinderbox User the localhost addresses (127.0.0.1 for IPv4,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User ::1 for IPv6).
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<dt><span class="term"><code class="constant">name</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt is the domain name to be looked up.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term"><code class="constant">type</code></span></dt>
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User indicates what type of query is required —
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User ANY, A, MX, etc.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User <em class="parameter"><code>type</code></em> can be any valid query
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>type</code></em> argument is supplied,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span><strong class="command">delv</strong></span> will perform a lookup for an
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<dt><span class="term">-a <em class="replaceable"><code>anchor-file</code></em></span></dt>
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User Specifies a file from which to read DNSSEC trust anchors.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User The default is <code class="filename">/etc/bind.keys</code>, which
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User is included with <acronym class="acronym">BIND</acronym> 9 and contains
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User trust anchors for the root zone (".") and for the ISC
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User DNSSEC lookaside validation zone ("dlv.isc.org").
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Keys that do not match the root or DLV trust-anchor
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User names are ignored; these key names can be overridden
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt using the <code class="option">+dlv=NAME</code> or
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User Note: When reading the trust anchor file,
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User <span><strong class="command">delv</strong></span> treats <code class="option">managed-keys</code>
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User statements and <code class="option">trusted-keys</code> statements
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User identically. That is, for a managed key, it is the
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User <span class="emphasis"><em>initial</em></span> key that is trusted; RFC 5011
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User key management is not supported. <span><strong class="command">delv</strong></span>
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User will not consult the managed-keys database maintained by
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User <span><strong class="command">named</strong></span>. This means that if either of the
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User keys in <code class="filename">/etc/bind.keys</code> is revoked
1a6f02ce4ae7b42056b51cfe31920f71d44efe4bTinderbox User and rolled over, it will be necessary to update
0ce865f8b2e652d6fe0c029e3538f4cc7e009fe1Tinderbox User <code class="filename">/etc/bind.keys</code> to use DNSSEC
0ce865f8b2e652d6fe0c029e3538f4cc7e009fe1Tinderbox User validation in <span><strong class="command">delv</strong></span>.
0ce865f8b2e652d6fe0c029e3538f4cc7e009fe1Tinderbox User<dt><span class="term">-b <em class="replaceable"><code>address</code></em></span></dt>
3cdd0f1bc921f19e790b4f795b90eabc94e9a74aTinderbox User Sets the source IP address of the query to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <em class="parameter"><code>address</code></em>. This must be a valid address
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User on one of the host's network interfaces or "0.0.0.0" or "::".
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User An optional source port may be specified by appending
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User "#<port>"
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Sets the query class for the requested data. Currently,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User only class "IN" is supported in <span><strong class="command">delv</strong></span>
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User and any other value is ignored.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<dt><span class="term">-d <em class="replaceable"><code>level</code></em></span></dt>
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User Set the systemwide debug level to <code class="option">level</code>.
f33abec8a62ab6f2b867d7189dfffa72592c027bTinderbox User The allowed range is from 0 to 99.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The default is 0 (no debugging).
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User Debugging traces from <span><strong class="command">delv</strong></span> become
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User more verbose as the debug level increases.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User See the <code class="option">+mtrace</code>, <code class="option">+rtrace</code>,
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User and <code class="option">+vtrace</code> options below for additional
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User debugging details.
2acf9aa8ffa476bee7003fd788539ed714733464Tinderbox User Display the <span><strong class="command">delv</strong></span> help usage output and exit.
2acf9aa8ffa476bee7003fd788539ed714733464Tinderbox User Insecure mode. This disables internal DNSSEC validation.
2acf9aa8ffa476bee7003fd788539ed714733464Tinderbox User (Note, however, this does not set the CD bit on upstream
2acf9aa8ffa476bee7003fd788539ed714733464Tinderbox User queries. If the server being queried is performing DNSSEC
fb2e132c5c1246d709ade9a2b3dad5ad72d35c5cTinderbox User validation, then it will not return invalid data; this
fb2e132c5c1246d709ade9a2b3dad5ad72d35c5cTinderbox User can cause <span><strong class="command">delv</strong></span> to time out. When it
fb2e132c5c1246d709ade9a2b3dad5ad72d35c5cTinderbox User is necessary to examine invalid data to debug a DNSSEC
fb2e132c5c1246d709ade9a2b3dad5ad72d35c5cTinderbox User problem, use <span><strong class="command">dig +cd</strong></span>.)
fb2e132c5c1246d709ade9a2b3dad5ad72d35c5cTinderbox User Enables memory usage debugging.
fb2e132c5c1246d709ade9a2b3dad5ad72d35c5cTinderbox User<dt><span class="term">-p <em class="replaceable"><code>port#</code></em></span></dt>
fb2e132c5c1246d709ade9a2b3dad5ad72d35c5cTinderbox User Specifies a destination port to use for queries instead of
fb2e132c5c1246d709ade9a2b3dad5ad72d35c5cTinderbox User the standard DNS port number 53. This option would be used
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User with a name server that has been configured to listen
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User for queries on a non-standard port number.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<dt><span class="term">-q <em class="replaceable"><code>name</code></em></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Sets the query name to <em class="parameter"><code>name</code></em>.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User While the query name can be specified without using the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="option">-q</code>, it is sometimes necessary to disambiguate
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User names from types or classes (for example, when looking up the
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User name "ns", which could be misinterpreted as the type NS,
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User or "ch", which could be misinterpreted as class CH).
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Sets the query type to <em class="parameter"><code>type</code></em>, which
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User can be any valid query type supported in BIND 9 except
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User for zone transfer types AXFR and IXFR. As with
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User <code class="option">-q</code>, this is useful to distinguish
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User query name type or class when they are ambiguous.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User it is sometimes necessary to disambiguate names from types.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The default query type is "A", unless the <code class="option">-x</code>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User option is supplied to indicate a reverse lookup, in which case
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Print the <span><strong class="command">delv</strong></span> version and exit.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term">-x <em class="replaceable"><code>addr</code></em></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Performs a reverse lookup, mapping an addresses to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User a name. <em class="parameter"><code>addr</code></em> is an IPv4 address in
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt dotted-decimal notation, or a colon-delimited IPv6 address.
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User When <code class="option">-x</code> is used, there is no need to provide
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User the <em class="parameter"><code>name</code></em> or <em class="parameter"><code>type</code></em>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User arguments. <span><strong class="command">delv</strong></span> automatically performs a
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User lookup for a name like <code class="literal">11.12.13.10.in-addr.arpa</code>
0da02c26a6631c25f075a8e4ac6de9e58f49a0c2Tinderbox User and sets the query type to PTR. IPv6 addresses are looked up
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User using nibble format under the IP6.ARPA domain.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Forces <span><strong class="command">delv</strong></span> to only use IPv4.
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User Forces <span><strong class="command">delv</strong></span> to only use IPv6.
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User<a name="id2674044"></a><h2>QUERY OPTIONS</h2>
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User<p><span><strong class="command">delv</strong></span>
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User provides a number of query options which affect the way results are
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User displayed, and in some cases the way lookups are performed.
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User Each query option is identified by a keyword preceded by a plus sign
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User (<code class="literal">+</code>). Some keywords set or reset an
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User option. These may be preceded by the string
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User <code class="literal">no</code> to negate the meaning of that keyword.
ffe29868b4bbc64953fc5d0de51f988c20158967Tinderbox User Other keywords assign values to options like the timeout interval.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt They have the form <code class="option">+keyword=value</code>.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The query options are:
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Controls whether to set the CD (checking disabled) bit in
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt queries sent by <span><strong class="command">delv</strong></span>. This may be useful
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt when troubleshooting DNSSEC problems from behind a validating
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User resolver. A validating resolver will block invalid responses,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User making it difficult to retrieve them for analysis. Setting
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the CD flag on queries will cause the resolver to return
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt invalid responses, which <span><strong class="command">delv</strong></span> can then
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt validate internally and report the errors in detail.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]class</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Controls whether to display the CLASS when printing
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User a record. The default is to display the CLASS.
e.g. "[ key id = value ]".
a trust anchor of "dlv.isc.org", for which there is a