man.delv.html revision a3ff24aaa545c45b8c581b2127d02d735aff8881
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
75c0816e8295e180f4bc7f10db3d0d880383bc1cMark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - purpose with or without fee is hereby granted, provided that the above
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - copyright notice and this permission notice appear in all copies.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - PERFORMANCE OF THIS SOFTWARE.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
e21a2904f02a03fa06b6db04d348f65fe9c67b2bMark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="prev" href="man.host.html" title="host">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<link rel="next" href="man.dnssec-checkds.html" title="dnssec-checkds">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<tr><th colspan="3" align="center">delv</th></tr>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<a accesskey="p" href="man.host.html">Prev</a>�</td>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-checkds.html">Next</a>
ab8729140b1ad688ab03e1e9ce438fb1cbb49222Automatic Updater<a name="man.delv"></a><div class="titlepage"></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<p>delv — DNS lookup and validation utility</p>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">delv</code> [@server] [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-a <em class="replaceable"><code>anchor-file</code></em></code>] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>level</code></em></code>] [<code class="option">-i</code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [name] [type] [class] [queryopt...]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">delv</code> [<code class="option">-h</code>]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">delv</code> [<code class="option">-v</code>]</p></div>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<div class="cmdsynopsis"><p><code class="command">delv</code> [queryopt...] [query...]</p></div>
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater<a name="id2616680"></a><h2>DESCRIPTION</h2>
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater<p><span><strong class="command">delv</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (Domain Entity Lookup & Validation) is a tool for sending
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater DNS queries and validating the results, using the the same internal
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater resolver and validator logic as <span><strong class="command">named</strong></span>.
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater <span><strong class="command">delv</strong></span> will send to a specified name server all
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater queries needed to fetch and validate the requested data; this
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein includes the original requested query, subsequent queries to follow
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein CNAME or DNAME chains, and queries for DNSKEY, DS and DLV records
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews to establish a chain of trust for DNSSEC validation.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein It does not perform iterative resolution, but simulates the
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater behavior of a name server configured for DNSSEC validating and
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater By default, responses are validated using built-in DNSSEC trust
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein anchors for the root zone (".") and for the ISC DNSSEC lookaside
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein validation zone ("dlv.isc.org"). Records returned by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">delv</strong></span> are either fully validated or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were not signed. If validation fails, an explanation of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the failure is included in the output; the validation process
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater can be traced in detail. Because <span><strong class="command">delv</strong></span> does
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater not rely on an external server to carry out validation, it can
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be used to check the validity of DNS responses in environments
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater where local name servers may not be trustworthy.
dcfda24abf565c442d058cbf81b2180d847a1b3eAutomatic Updater Unless it is told to query a specific name server,
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater <span><strong class="command">delv</strong></span> will try each of the servers listed in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="filename">/etc/resolv.conf</code>. If no usable server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein addresses are found, <span><strong class="command">delv</strong></span> will send
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein queries to the localhost addresses (127.0.0.1 for IPv4, ::1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein When no command line arguments or options are given,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <span><strong class="command">delv</strong></span> will perform an NS query for "."
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater (the root zone).
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater<a name="id2616753"></a><h2>SIMPLE USAGE</h2>
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater A typical invocation of <span><strong class="command">delv</strong></span> looks like:
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater<pre class="programlisting"> delv @server name type </pre>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="constant">server</code></span></dt>
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater is the name or IP address of the name server to query. This
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater can be an IPv4 address in dotted-decimal notation or an IPv6
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater address in colon-delimited notation. When the supplied
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater <em class="parameter"><code>server</code></em> argument is a hostname,
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater <span><strong class="command">delv</strong></span> resolves that name before
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater querying that name server (note, however, that this
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater initial lookup is <span class="emphasis"><em>not</em></span> validated
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater If no <em class="parameter"><code>server</code></em> argument is
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater provided, <span><strong class="command">delv</strong></span> consults
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater <code class="filename">/etc/resolv.conf</code>; if an
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater address is found there, it queries the name server at
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater that address. If either of the <code class="option">-4</code> or
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater <code class="option">-6</code> options are in use, then
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater only addresses for the corresponding transport
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater will be tried. If no usable addresses are found,
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater <span><strong class="command">delv</strong></span> will send queries to
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater the localhost addresses (127.0.0.1 for IPv4,
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater ::1 for IPv6).
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater<dt><span class="term"><code class="constant">name</code></span></dt>
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater is the domain name to be looked up.
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater<dt><span class="term"><code class="constant">type</code></span></dt>
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater indicates what type of query is required —
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater ANY, A, MX, etc.
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater <em class="parameter"><code>type</code></em> can be any valid query
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater <em class="parameter"><code>type</code></em> argument is supplied,
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater <span><strong class="command">delv</strong></span> will perform a lookup for an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-a <em class="replaceable"><code>anchor-file</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Specifies a file from which to read DNSSEC trust anchors.
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater The default is <code class="filename">/etc/bind.keys</code>, which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is included with <acronym class="acronym">BIND</acronym> 9 and contains
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein trust anchors for the root zone (".") and for the ISC
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DNSSEC lookaside validation zone ("dlv.isc.org").
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Keys that do not match the root or DLV trust-anchor
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater names are ignored; these key names can be overridden
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein using the <code class="option">+dlv=NAME</code> or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Note: When reading the trust anchor file,
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater <span><strong class="command">delv</strong></span> treats <code class="option">managed-keys</code>
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater statements and <code class="option">trusted-keys</code> statements
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater identically. That is, for a managed key, it is the
f77c5a1336bc11ae235f1b91f1b7cbae1137c3e8Automatic Updater <span class="emphasis"><em>initial</em></span> key that is trusted; RFC 5011
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein key management is not supported. <span><strong class="command">delv</strong></span>
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater will not consult the managed-keys database maintained by
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater <span><strong class="command">named</strong></span>. This means that if either of the
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater keys in <code class="filename">/etc/bind.keys</code> is revoked
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater and rolled over, it will be necessary to update
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="filename">/etc/bind.keys</code> to use DNSSEC
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater validation in <span><strong class="command">delv</strong></span>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-b <em class="replaceable"><code>address</code></em></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Sets the source IP address of the query to
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater <em class="parameter"><code>address</code></em>. This must be a valid address
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater on one of the host's network interfaces or "0.0.0.0" or "::".
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater An optional source port may be specified by appending
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater "#<port>"
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater Sets the query class for the requested data. Currently,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein only class "IN" is supported in <span><strong class="command">delv</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and any other value is ignored.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term">-d <em class="replaceable"><code>level</code></em></span></dt>
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater Set the systemwide debug level to <code class="option">level</code>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The allowed range is from 0 to 99.
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater The default is 0 (no debugging).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Debugging traces from <span><strong class="command">delv</strong></span> become
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein more verbose as the debug level increases.
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater See the <code class="option">+mtrace</code>, <code class="option">+rtrace</code>,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and <code class="option">+vtrace</code> options below for additional
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater debugging details.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Display the <span><strong class="command">delv</strong></span> help usage output and exit.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews Insecure mode. This disables internal DNSSEC validation.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (Note, however, this does not set the CD bit on upstream
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein queries. If the server being queried is performing DNSSEC
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater validation, then it will not return invalid data; this
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein can cause <span><strong class="command">delv</strong></span> to time out. When it
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater is necessary to examine invalid data to debug a DNSSEC
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater problem, use <span><strong class="command">dig +cd</strong></span>.)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Enables memory usage debugging.
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater<dt><span class="term">-p <em class="replaceable"><code>port#</code></em></span></dt>
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater Specifies a destination port to use for queries instead of
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater the standard DNS port number 53. This option would be used
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with a name server that has been configured to listen
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for queries on a non-standard port number.
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater<dt><span class="term">-q <em class="replaceable"><code>name</code></em></span></dt>
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater Sets the query name to <em class="parameter"><code>name</code></em>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein While the query name can be specified without using the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <code class="option">-q</code>, it is sometimes necessary to disambiguate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein names from types or classes (for example, when looking up the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein name "ns", which could be misinterpreted as the type NS,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or "ch", which could be misinterpreted as class CH).
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater Sets the query type to <em class="parameter"><code>type</code></em>, which
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater can be any valid query type supported in BIND 9 except
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater for zone transfer types AXFR and IXFR. As with
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater <code class="option">-q</code>, this is useful to distinguish
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater query name type or class when they are ambiguous.
6f64d4ab8e68f9b2333bcbfc755396d29a4a9d7cAutomatic Updater it is sometimes necessary to disambiguate names from types.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The default query type is "A", unless the <code class="option">-x</code>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews option is supplied to indicate a reverse lookup, in which case
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews it is "PTR".
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews Print the <span><strong class="command">delv</strong></span> version and exit.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<dt><span class="term">-x <em class="replaceable"><code>addr</code></em></span></dt>
922312472e2e05ebc64993d465999c5351b83036Automatic Updater Performs a reverse lookup, mapping an addresses to
922312472e2e05ebc64993d465999c5351b83036Automatic Updater a name. <em class="parameter"><code>addr</code></em> is an IPv4 address in
28b3569d6248168e6c00caab951521cc8141a49dAutomatic Updater dotted-decimal notation, or a colon-delimited IPv6 address.
28b3569d6248168e6c00caab951521cc8141a49dAutomatic Updater When <code class="option">-x</code> is used, there is no need to provide
28b3569d6248168e6c00caab951521cc8141a49dAutomatic Updater the <em class="parameter"><code>name</code></em> or <em class="parameter"><code>type</code></em>
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews arguments. <span><strong class="command">delv</strong></span> automatically performs a
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews lookup for a name like <code class="literal">11.12.13.10.in-addr.arpa</code>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews and sets the query type to PTR. IPv6 addresses are looked up
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater using nibble format under the IP6.ARPA domain.
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater Forces <span><strong class="command">delv</strong></span> to only use IPv4.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Forces <span><strong class="command">delv</strong></span> to only use IPv6.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews<p><span><strong class="command">delv</strong></span>
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews provides a number of query options which affect the way results are
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews displayed, and in some cases the way lookups are performed.
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater Each query option is identified by a keyword preceded by a plus sign
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater (<code class="literal">+</code>). Some keywords set or reset an
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater option. These may be preceded by the string
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater <code class="literal">no</code> to negate the meaning of that keyword.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater Other keywords assign values to options like the timeout interval.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews They have the form <code class="option">+keyword=value</code>.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews The query options are:
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater Controls whether to set the CD (checking disabled) bit in
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater queries sent by <span><strong class="command">delv</strong></span>. This may be useful
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater when troubleshooting DNSSEC problems from behind a validating
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater resolver. A validating resolver will block invalid responses,
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater making it difficult to retrieve them for analysis. Setting
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater the CD flag on queries will cause the resolver to return
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater invalid responses, which <span><strong class="command">delv</strong></span> can then
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater validate internally and report the errors in detail.
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater<dt><span class="term"><code class="option">+[no]class</code></span></dt>
fdd80e9a55c70b36a3bf3e409b86897301c44ff8Automatic Updater Controls whether to display the CLASS when printing
fdd80e9a55c70b36a3bf3e409b86897301c44ff8Automatic Updater a record. The default is to display the CLASS.
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater<dt><span class="term"><code class="option">+[no]ttl</code></span></dt>
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Controls whether to display the TTL when printing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a record. The default is to display the TTL.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]rtrace</code></span></dt>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Toggle resolver fetch logging. This reports the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein name and type of each query sent by <span><strong class="command">delv</strong></span>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the process of carrying out the resolution and validation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein process: this includes including the original query and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein all subsequent queries to follow CNAMEs and to establish a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein chain of trust for DNSSEC validation.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein This is equivalent to setting the debug level to 1 in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the "resolver" logging category. Setting the systemwide
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein debug level to 1 using the <code class="option">-d</code> option will
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein product the same output (but will affect other logging
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein categories as well).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein<dt><span class="term"><code class="option">+[no]mtrace</code></span></dt>
e.g. "[ key id = value ]".
a trust anchor of "dlv.isc.org", for which there is a