man.delv.html revision 964783e7e85651d14f8c6533b7207a8b3650e7a3
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Copyright (C) 2000-2003 Internet Software Consortium.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Permission to use, copy, modify, and/or distribute this software for any
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - purpose with or without fee is hereby granted, provided that the above
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - copyright notice and this permission notice appear in all copies.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - PERFORMANCE OF THIS SOFTWARE.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<!-- $Id$ -->
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="prev" href="man.host.html" title="host">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="next" href="man.dnssec-checkds.html" title="dnssec-checkds">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<table width="100%" summary="Navigation header">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<tr><th colspan="3" align="center">delv</th></tr>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<a accesskey="p" href="man.host.html">Prev</a>�</td>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<th width="60%" align="center">Manual pages</th>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-checkds.html">Next</a>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<a name="man.delv"></a><div class="titlepage"></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p>delv — DNS lookup and validation utility</p>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<div class="cmdsynopsis"><p><code class="command">delv</code> [@server] [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-a <em class="replaceable"><code>anchor-file</code></em></code>] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>level</code></em></code>] [<code class="option">-i</code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [name] [type] [class] [queryopt...]</p></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<div class="cmdsynopsis"><p><code class="command">delv</code> [<code class="option">-h</code>]</p></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<div class="cmdsynopsis"><p><code class="command">delv</code> [<code class="option">-v</code>]</p></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<div class="cmdsynopsis"><p><code class="command">delv</code> [queryopt...] [query...]</p></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p><span><strong class="command">delv</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster (Domain Entity Lookup & Validation) is a tool for sending
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster DNS queries and validating the results, using the same internal
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster resolver and validator logic as <span><strong class="command">named</strong></span>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">delv</strong></span> will send to a specified name server all
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster queries needed to fetch and validate the requested data; this
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster includes the original requested query, subsequent queries to follow
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster CNAME or DNAME chains, and queries for DNSKEY, DS and DLV records
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to establish a chain of trust for DNSSEC validation.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster It does not perform iterative resolution, but simulates the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster behavior of a name server configured for DNSSEC validating and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster By default, responses are validated using built-in DNSSEC trust
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster anchors for the root zone (".") and for the ISC DNSSEC lookaside
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster validation zone ("dlv.isc.org"). Records returned by
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">delv</strong></span> are either fully validated or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster were not signed. If validation fails, an explanation of
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the failure is included in the output; the validation process
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster can be traced in detail. Because <span><strong class="command">delv</strong></span> does
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster not rely on an external server to carry out validation, it can
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster be used to check the validity of DNS responses in environments
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster where local name servers may not be trustworthy.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Unless it is told to query a specific name server,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">delv</strong></span> will try each of the servers listed in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">/etc/resolv.conf</code>. If no usable server
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster addresses are found, <span><strong class="command">delv</strong></span> will send
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster queries to the localhost addresses (127.0.0.1 for IPv4, ::1
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster When no command line arguments or options are given,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">delv</strong></span> will perform an NS query for "."
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster (the root zone).
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster A typical invocation of <span><strong class="command">delv</strong></span> looks like:
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<pre class="programlisting"> delv @server name type </pre>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="constant">server</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is the name or IP address of the name server to query. This
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster can be an IPv4 address in dotted-decimal notation or an IPv6
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster address in colon-delimited notation. When the supplied
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>server</code></em> argument is a hostname,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">delv</strong></span> resolves that name before
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster querying that name server (note, however, that this
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster initial lookup is <span class="emphasis"><em>not</em></span> validated
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster If no <em class="parameter"><code>server</code></em> argument is
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster provided, <span><strong class="command">delv</strong></span> consults
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">/etc/resolv.conf</code>; if an
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster address is found there, it queries the name server at
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster that address. If either of the <code class="option">-4</code> or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-6</code> options are in use, then
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster only addresses for the corresponding transport
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster will be tried. If no usable addresses are found,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">delv</strong></span> will send queries to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the localhost addresses (127.0.0.1 for IPv4,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster ::1 for IPv6).
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="constant">name</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is the domain name to be looked up.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="constant">type</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster indicates what type of query is required —
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster ANY, A, MX, etc.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>type</code></em> can be any valid query
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>type</code></em> argument is supplied,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">delv</strong></span> will perform a lookup for an
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-a <em class="replaceable"><code>anchor-file</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Specifies a file from which to read DNSSEC trust anchors.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The default is <code class="filename">/etc/bind.keys</code>, which
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is included with <acronym class="acronym">BIND</acronym> 9 and contains
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster trust anchors for the root zone (".") and for the ISC
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster DNSSEC lookaside validation zone ("dlv.isc.org").
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Keys that do not match the root or DLV trust-anchor
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster names are ignored; these key names can be overridden
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster using the <code class="option">+dlv=NAME</code> or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">+root=NAME</code> options.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Note: When reading the trust anchor file,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">delv</strong></span> treats <code class="option">managed-keys</code>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster statements and <code class="option">trusted-keys</code> statements
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster identically. That is, for a managed key, it is the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span class="emphasis"><em>initial</em></span> key that is trusted; RFC 5011
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster key management is not supported. <span><strong class="command">delv</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster will not consult the managed-keys database maintained by
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">named</strong></span>. This means that if either of the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster keys in <code class="filename">/etc/bind.keys</code> is revoked
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and rolled over, it will be necessary to update
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">/etc/bind.keys</code> to use DNSSEC
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster validation in <span><strong class="command">delv</strong></span>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-b <em class="replaceable"><code>address</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the source IP address of the query to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>address</code></em>. This must be a valid address
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster on one of the host's network interfaces or "0.0.0.0" or "::".
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster An optional source port may be specified by appending
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster "#<port>"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the query class for the requested data. Currently,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster only class "IN" is supported in <span><strong class="command">delv</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and any other value is ignored.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-d <em class="replaceable"><code>level</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Set the systemwide debug level to <code class="option">level</code>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The allowed range is from 0 to 99.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The default is 0 (no debugging).
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Debugging traces from <span><strong class="command">delv</strong></span> become
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster more verbose as the debug level increases.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster See the <code class="option">+mtrace</code>, <code class="option">+rtrace</code>,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and <code class="option">+vtrace</code> options below for additional
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster debugging details.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Display the <span><strong class="command">delv</strong></span> help usage output and exit.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Insecure mode. This disables internal DNSSEC validation.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster (Note, however, this does not set the CD bit on upstream
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster queries. If the server being queried is performing DNSSEC
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster validation, then it will not return invalid data; this
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster can cause <span><strong class="command">delv</strong></span> to time out. When it
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is necessary to examine invalid data to debug a DNSSEC
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster problem, use <span><strong class="command">dig +cd</strong></span>.)
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Enables memory usage debugging.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-p <em class="replaceable"><code>port#</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Specifies a destination port to use for queries instead of
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the standard DNS port number 53. This option would be used
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster with a name server that has been configured to listen
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster for queries on a non-standard port number.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-q <em class="replaceable"><code>name</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the query name to <em class="parameter"><code>name</code></em>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster While the query name can be specified without using the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-q</code>, it is sometimes necessary to disambiguate
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster names from types or classes (for example, when looking up the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster name "ns", which could be misinterpreted as the type NS,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster or "ch", which could be misinterpreted as class CH).
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the query type to <em class="parameter"><code>type</code></em>, which
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster can be any valid query type supported in BIND 9 except
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster for zone transfer types AXFR and IXFR. As with
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-q</code>, this is useful to distinguish
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster query name type or class when they are ambiguous.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster it is sometimes necessary to disambiguate names from types.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The default query type is "A", unless the <code class="option">-x</code>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster option is supplied to indicate a reverse lookup, in which case
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster it is "PTR".
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Print the <span><strong class="command">delv</strong></span> version and exit.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-x <em class="replaceable"><code>addr</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Performs a reverse lookup, mapping an addresses to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster a name. <em class="parameter"><code>addr</code></em> is an IPv4 address in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster dotted-decimal notation, or a colon-delimited IPv6 address.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster When <code class="option">-x</code> is used, there is no need to provide
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the <em class="parameter"><code>name</code></em> or <em class="parameter"><code>type</code></em>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster arguments. <span><strong class="command">delv</strong></span> automatically performs a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster lookup for a name like <code class="literal">11.12.13.10.in-addr.arpa</code>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and sets the query type to PTR. IPv6 addresses are looked up
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster using nibble format under the IP6.ARPA domain.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Forces <span><strong class="command">delv</strong></span> to only use IPv4.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Forces <span><strong class="command">delv</strong></span> to only use IPv6.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p><span><strong class="command">delv</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster provides a number of query options which affect the way results are
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster displayed, and in some cases the way lookups are performed.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Each query option is identified by a keyword preceded by a plus sign
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster (<code class="literal">+</code>). Some keywords set or reset an
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster option. These may be preceded by the string
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="literal">no</code> to negate the meaning of that keyword.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Other keywords assign values to options like the timeout interval.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster They have the form <code class="option">+keyword=value</code>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The query options are:
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Controls whether to set the CD (checking disabled) bit in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster queries sent by <span><strong class="command">delv</strong></span>. This may be useful
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster when troubleshooting DNSSEC problems from behind a validating
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster resolver. A validating resolver will block invalid responses,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster making it difficult to retrieve them for analysis. Setting
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the CD flag on queries will cause the resolver to return
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster invalid responses, which <span><strong class="command">delv</strong></span> can then
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster validate internally and report the errors in detail.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]class</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Controls whether to display the CLASS when printing
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster a record. The default is to display the CLASS.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]ttl</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Controls whether to display the TTL when printing
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster a record. The default is to display the TTL.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]rtrace</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Toggle resolver fetch logging. This reports the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster name and type of each query sent by <span><strong class="command">delv</strong></span>
e.g. "[ key id = value ]".
a trust anchor of "dlv.isc.org", for which there is a