man.dig.html revision 7329012471d165cd3dc4180ad2a0a43de91e7f01
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - Copyright (C) 2000-2003 Internet Software Consortium.
e5404e49304b1f8f13a03cc63e5341e4501735ceTinderbox User - Permission to use, copy, modify, and distribute this software for any
ba9e87b35e561bc7354ce3f4b9685b747b7be507Tinderbox User - purpose with or without fee is hereby granted, provided that the above
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews - copyright notice and this permission notice appear in all copies.
d0036fd5ddfe3c8e24151bbb1f21bc51bf876774Tinderbox User - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
59663800d2ec04777dae2791dd92aa563faf94c8Evan Hunt - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
1ca2cf024391992fe14b2df7d3ae0f575d074452Evan Hunt - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
70732dde17dc4944e2e030293e31c0e40df9e61eTinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
70732dde17dc4944e2e030293e31c0e40df9e61eTinderbox User - PERFORMANCE OF THIS SOFTWARE.
8de3f14f1c300c3e1ed99084cc03485b42c92bf1Tinderbox User<!-- $Id: man.dig.html,v 1.15 2006/01/27 05:17:12 marka Exp $ -->
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
2b7254075b883d70852a2757210793603085a0f1Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.69.1">
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<link rel="next" href="man.host.html" title="host">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<table width="100%" summary="Navigation header">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<tr><th colspan="3" align="center">dig</th></tr>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews<th width="60%" align="center">Manual pages</th>
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews<a name="man.dig"></a><div class="titlepage"></div>
7fcb9dbe08bc0111c5e03e953ba889f86a38b854Tinderbox User<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<p><span><strong class="command">dig</strong></span>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (domain information groper) is a flexible tool
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt for interrogating DNS name servers. It performs DNS lookups and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews displays the answers that are returned from the name server(s) that
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt troubleshoot DNS problems because of its flexibility, ease of use and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews clarity of output. Other lookup tools tend to have less functionality
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews than <span><strong class="command">dig</strong></span>.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Although <span><strong class="command">dig</strong></span> is normally used with
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews arguments, it also has a batch mode of operation for reading lookup
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User requests from a file. A brief summary of its command-line arguments
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews and options is printed when the <code class="option">-h</code> option is given.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Unlike earlier versions, the BIND9 implementation of
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews command line.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Unless it is told to query a specific name server,
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <span><strong class="command">dig</strong></span> will try each of the servers listed
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <code class="filename">/etc/resolv.conf</code>.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews When no command line arguments or options are given, will perform an
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User NS query for "." (the root).
b378314925e78f21853a98cec924788ce1822c6cTinderbox User It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
ebe53509ca55a141131c104b6d722236b606e0efTinderbox User <code class="filename">${HOME}/.digrc</code>. This file is read and
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews any options in it
415d630b6309922caee8469384a6fab75cf05032Mark Andrews are applied before the command line arguments.
7cc0a5d21ef046bfd630c4769943d896a7d7472cTinderbox User A typical invocation of <span><strong class="command">dig</strong></span> looks like:
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<pre class="programlisting"> dig @server name type </pre>
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User<dt><span class="term"><code class="constant">server</code></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews is the name or IP address of the name server to query. This can
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews address in dotted-decimal notation or an IPv6
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User address in colon-delimited notation. When the supplied
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User <em class="parameter"><code>server</code></em> argument is a
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <span><strong class="command">dig</strong></span> resolves that name before
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson querying that name
415d630b6309922caee8469384a6fab75cf05032Mark Andrews server. If no <em class="parameter"><code>server</code></em>
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews argument is provided,
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews and queries the name servers listed there. The reply from the
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews server that responds is displayed.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User<dt><span class="term"><code class="constant">name</code></span></dt>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews is the name of the resource record that is to be looked up.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews<dt><span class="term"><code class="constant">type</code></span></dt>
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User indicates what type of query is required —
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews ANY, A, MX, SIG, etc.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <em class="parameter"><code>type</code></em> can be any valid query
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <em class="parameter"><code>type</code></em> argument is supplied,
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews <span><strong class="command">dig</strong></span> will perform a lookup for an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews The <code class="option">-b</code> option sets the source IP address of the query
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to <em class="parameter"><code>address</code></em>. This must be a valid
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont one of the host's network interfaces or "0.0.0.0" or "::". An optional
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews may be specified by appending "#<port>"
51aeb0ae19596e99b029cfa933e73b76ebec480aTinderbox User The default query class (IN for internet) is overridden by the
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews class, such as HS for Hesiod records or CH for CHAOSNET records.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox User in batch mode by reading a list of lookup requests to process from the
b378314925e78f21853a98cec924788ce1822c6cTinderbox User file <em class="parameter"><code>filename</code></em>. The file contains a
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews queries, one per line. Each entry in the file should be organised in
2b7254075b883d70852a2757210793603085a0f1Tinderbox User the same way they would be presented as queries to
66317da170ed35b08f5847db2d48b225826327cbTinderbox User <span><strong class="command">dig</strong></span> using the command-line interface.
b625bdae12277225b076a002dd4af80902529181Tinderbox User If a non-standard port number is to be queried, the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews the port number that <span><strong class="command">dig</strong></span> will send its
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox User instead of the standard DNS port number 53. This option would be used
415d630b6309922caee8469384a6fab75cf05032Mark Andrews to test a name server that has been configured to listen for queries
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater on a non-standard port number.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater use IPv4 query transport. The <code class="option">-6</code> option forces
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews The <code class="option">-t</code> option sets the query type to
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <em class="parameter"><code>type</code></em>. It can be any valid query type
415d630b6309922caee8469384a6fab75cf05032Mark Andrews supported in BIND9. The default query type "A", unless the
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews <code class="option">-x</code> option is supplied to indicate a reverse lookup.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User A zone transfer can be requested by specifying a type of AXFR. When
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews an incremental zone transfer (IXFR) is required,
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater The incremental zone transfer will contain the changes made to the zone
415d630b6309922caee8469384a6fab75cf05032Mark Andrews since the serial number in the zone's SOA record was
415d630b6309922caee8469384a6fab75cf05032Mark Andrews The <code class="option">-q</code> option sets the query name to
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson <em class="parameter"><code>name</code></em>. This useful do distingish the
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <em class="parameter"><code>name</code></em> from other arguments.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Reverse lookups - mapping addresses to names - are simplified by the
415d630b6309922caee8469384a6fab75cf05032Mark Andrews <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
415d630b6309922caee8469384a6fab75cf05032Mark Andrews address in dotted-decimal notation, or a colon-delimited IPv6 address.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews When this option is used, there is no need to provide the
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews automatically performs a lookup for a name like
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
415d630b6309922caee8469384a6fab75cf05032Mark Andrews query type and
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews class to PTR and IN respectively. By default, IPv6 addresses are
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User looked up using nibble format under the IP6.ARPA domain.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews To use the older RFC1886 method using the IP6.INT domain
415d630b6309922caee8469384a6fab75cf05032Mark Andrews specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson are now experimental and are not attempted.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
415d630b6309922caee8469384a6fab75cf05032Mark Andrews responses using transaction signatures (TSIG), specify a TSIG key file
5f7586ddbd3edd11272cdd30ed613d936129328bTinderbox User using the <code class="option">-k</code> option. You can also specify the TSIG
415d630b6309922caee8469384a6fab75cf05032Mark Andrews key itself on the command line using the <code class="option">-y</code> option;
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User <em class="parameter"><code>name</code></em> is the name of the TSIG key and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <em class="parameter"><code>key</code></em> is the actual key. The key is a
7fcb9dbe08bc0111c5e03e953ba889f86a38b854Tinderbox User encoded string, typically generated by
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Caution should be taken when using the <code class="option">-y</code> option on
0536b2e5496752fd497ad26322cbf60d7746e7acTinderbox User multi-user systems as the key can be visible in the output from
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
1fce11b1d3f2d461d261156b8cdc64ab864f06a9Tinderbox User or in the shell's history file. When
fab54780409846f7c71f6026d665f18c77c649efTinderbox User using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews server that is queried needs to know the key and algorithm that is
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User being used. In BIND, this is done by providing appropriate
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
8927a982bde7e4b665966b55f0fa57c5cf21b9d8Mark Andrews<p><span><strong class="command">dig</strong></span>
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User provides a number of query options which affect
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the way in which lookups are made and the results displayed. Some of
98240f34c38524fd6d0db5a42b9d47cd95ec0fa1Tinderbox User these set or reset flag bits in the query header, some determine which
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews sections of the answer get printed, and others determine the timeout
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and retry strategies.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Each query option is identified by a keyword preceded by a plus sign
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (<code class="literal">+</code>). Some keywords set or reset an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews option. These may be preceded
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews by the string <code class="literal">no</code> to negate the meaning of
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User that keyword. Other
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews keywords assign values to options like the timeout interval. They
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews have the form <code class="option">+keyword=value</code>.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews The query options are:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Use [do not use] TCP when querying name servers. The default
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews behaviour is to use UDP unless an AXFR or IXFR query is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews requested, in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews which case a TCP connection is used.
8ac5ddf659a81ed668579818981fc1a5f28405d1Tinderbox User<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
98240f34c38524fd6d0db5a42b9d47cd95ec0fa1Tinderbox User Use [do not use] TCP when querying name servers. This alternate
1ef84760d1d9c2f4610c3f9c777267388971ae80Tinderbox User syntax to <em class="parameter"><code>+[no]tcp</code></em> is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews provided for backwards
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews compatibility. The "vc" stands for "virtual circuit".
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Ignore truncation in UDP responses instead of retrying with TCP.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews default, TCP retries are performed.
e5c7ef08d1bf9f8388de8174a47da78b9eeb7e5cTinderbox User<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Set the search list to contain the single domain
2b7254075b883d70852a2757210793603085a0f1Tinderbox User <em class="parameter"><code>somename</code></em>, as if specified in
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews <span><strong class="command">domain</strong></span> directive in
f63cdafaee9877fa644b056acc34980f5caa438fTinderbox User <code class="filename">/etc/resolv.conf</code>, and enable
e5c7ef08d1bf9f8388de8174a47da78b9eeb7e5cTinderbox User processing as if the <em class="parameter"><code>+search</code></em>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews option were given.
2f16d4dc2979b55340991f6d9248efdd61d8d3b6Tinderbox User<dt><span class="term"><code class="option">+[no]search</code></span></dt>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Use [do not use] the search list defined by the searchlist or
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews directive in <code class="filename">resolv.conf</code> (if
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews The search list is not used by default.
076e51f1ff9497ae61a99994189ed8bf5a0d3472Tinderbox User<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
f63cdafaee9877fa644b056acc34980f5caa438fTinderbox User Perform [do not perform] a search showing intermediate
076e51f1ff9497ae61a99994189ed8bf5a0d3472Tinderbox User<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Sets the "aa" flag in the query.
076e51f1ff9497ae61a99994189ed8bf5a0d3472Tinderbox User<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
5bd7123f31b8ca63a4087e19a414b27d2dfaa8baTinderbox User A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
3ccf87473f7cf6d9faac156df38a935a238f96fdTinderbox User<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
f63cdafaee9877fa644b056acc34980f5caa438fTinderbox User Set [do not set] the AD (authentic data) bit in the query. The
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews currently has a standard meaning only in responses, not in
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson but the ability to set the bit in the query is provided for
415d630b6309922caee8469384a6fab75cf05032Mark Andrews completeness.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User Set [do not set] the CD (checking disabled) bit in the query.
8292deab031e7599cd7622aa7675fbe139ca6095Mark Andrews requests the server to not perform DNSSEC validation of
4b61b671f5de767ec1d1b8e6cf7b849bddf08e98Tinderbox User<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews Display [do not display] the CLASS when printing the record.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews Display [do not display] the TTL when printing the record.
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews Toggle the setting of the RD (recursion desired) bit in the
f1a2709aad7baa4161fdb6f63edf99b0150af252Evan Hunt This bit is set by default, which means <span><strong class="command">dig</strong></span>
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews normally sends recursive queries. Recursion is automatically
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when the <em class="parameter"><code>+nssearch</code></em> or
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <em class="parameter"><code>+trace</code></em> query options are
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews When this option is set, <span><strong class="command">dig</strong></span>
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User attempts to find the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews authoritative name servers for the zone containing the name
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater looked up and display the SOA record that each name server has
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater Toggle tracing of the delegation path from the root name servers
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews the name being looked up. Tracing is disabled by default. When
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User tracing is enabled, <span><strong class="command">dig</strong></span> makes
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews iterative queries to
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews resolve the name being looked up. It will follow referrals from
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews root servers, showing the answer from each server that was used
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User resolve the lookup.
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews toggles the printing of the initial comment in the output
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews the version of <span><strong class="command">dig</strong></span> and the query
9b0a4470f94e6e6c8ef5d85f3efa4fee0945796fTinderbox User options that have
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews been applied. This comment is printed by default.
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews<dt><span class="term"><code class="option">+[no]short</code></span></dt>
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox User Provide a terse answer. The default is to print the answer in a
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews verbose form.
9b0a4470f94e6e6c8ef5d85f3efa4fee0945796fTinderbox User<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews Show [or do not show] the IP address and port number that
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews supplied the
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews answer when the <em class="parameter"><code>+short</code></em> option
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews is enabled. If
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews short form answers are requested, the default is not to show the
8927a982bde7e4b665966b55f0fa57c5cf21b9d8Mark Andrews source address and port number of the server that provided the
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews Toggle the display of comment lines in the output. The default
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews print comments.
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
baeaed18341c015e9ad54ffa21973184c1bc432bMark Andrews This query option toggles the printing of statistics: when the
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews was made, the size of the reply and so on. The default
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews behaviour is
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews to print the query statistics.
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews Print [do not print] the query as it is sent.
49d33058a8aca3e7dd3bdb497ad96d2260d1c019Tinderbox User By default, the query is not printed.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<dt><span class="term"><code class="option">+[no]question</code></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Print [do not print] the question section of a query when an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews returned. The default is to print the question section as a
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Display [do not display] the answer section of a reply. The
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews is to display it.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews Display [do not display] the authority section of a reply. The
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User default is to display it.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews Display [do not display] the additional section of a reply.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User The default is to display it.
3a988722ad9e209ba4064604d482dc4efe0e19ebTinderbox User<dt><span class="term"><code class="option">+[no]all</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Set or clear all display flags.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<dt><span class="term"><code class="option">+time=T</code></span></dt>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Sets the timeout for a query to
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <em class="parameter"><code>T</code></em> seconds. The default time
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews out is 5 seconds.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews An attempt to set <em class="parameter"><code>T</code></em> to less
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User than 1 will result
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews in a query timeout of 1 second being applied.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<dt><span class="term"><code class="option">+tries=T</code></span></dt>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Sets the number of times to try UDP queries to server to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <em class="parameter"><code>T</code></em> instead of the default, 3.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <em class="parameter"><code>T</code></em> is less than or equal to
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews zero, the number of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews tries is silently rounded up to 1.
f63cdafaee9877fa644b056acc34980f5caa438fTinderbox User<dt><span class="term"><code class="option">+retry=T</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Sets the number of times to retry UDP queries to server to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>T</code></em> instead of the default, 2.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>+tries</code></em>, this does not include
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Set the number of dots that have to appear in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington considered absolute. The default value is that defined using
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ndots statement is present. Names with fewer dots are
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington interpreted as
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington relative names and will be searched for in the domains listed in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <code class="option">search</code> or <code class="option">domain</code> directive in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <code class="filename">/etc/resolv.conf</code>.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Set the UDP message buffer size advertised using EDNS0 to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of this buffer are 65535 and 0 respectively. Values outside
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington this range are rounded up or down appropriately.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Values other than zero will cause a EDNS query to be sent.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+edns=#</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Specify the EDNS version to query with. Valid values
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington are 0 to 255. Setting the EDNS version will cause a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington EDNS query to be sent. <code class="option">+noedns</code> clears the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington remembered EDNS version.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Print records like the SOA records in a verbose multi-line
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington format with human-readable comments. The default is to print
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington each record on a single line, to facilitate machine parsing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of the <span><strong class="command">dig</strong></span> output.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Do not try the next server if you receive a SERVFAIL. The
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to not try the next server which is the reverse of normal stub
415d630b6309922caee8469384a6fab75cf05032Mark Andrews<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
415d630b6309922caee8469384a6fab75cf05032Mark Andrews Attempt to display the contents of messages which are malformed.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews The default is to not display malformed answers.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater Requests DNSSEC records be sent by setting the DNSSEC OK bit
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater in the OPT record in the additional section of the query.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Chase DNSSEC signature chains. Requires dig be compiled with
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater -DDIG_SIGCHASE.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater Specifies a file containing trusted keys to be used with
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater <code class="option">+sigchase</code>. Each DNSKEY record must be
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater on its own line.
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User If not specified <span><strong class="command">dig</strong></span> will look for
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User <code class="filename">/etc/trusted-key.key</code> then
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User <code class="filename">trusted-key.key</code> in the current directory.
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User Requires dig be compiled with -DDIG_SIGCHASE.
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User When chasing DNSSEC signature chains perform a top down
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Requires dig be compiled with -DDIG_SIGCHASE.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<a name="id2602914"></a><h2>MULTIPLE QUERIES</h2>
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews The BIND 9 implementation of <span><strong class="command">dig </strong></span>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews specifying multiple queries on the command line (in addition to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews supporting the <code class="option">-f</code> batch file option). Each of those
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews queries can be supplied with its own set of flags, options and query
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews In this case, each <em class="parameter"><code>query</code></em> argument
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews individual query in the command-line syntax described above. Each
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews consists of any of the standard options and flags, the name to be
415d630b6309922caee8469384a6fab75cf05032Mark Andrews looked up, an optional query type and class and any query options that
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews should be applied to that query.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User A global set of query options, which should be applied to all queries,
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews can also be supplied. These global query options must precede the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews first tuple of name, class, type, options, flags, and query options
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews supplied on the command line. Any global query options (except
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the <code class="option">+[no]cmd</code> option) can be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews overridden by a query-specific set of query options. For example:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrewsdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews shows how <span><strong class="command">dig</strong></span> could be used from the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington reverse lookup of 127.0.0.1 and a query for the NS records of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington A global query option of <em class="parameter"><code>+qr</code></em> is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington that <span><strong class="command">dig</strong></span> shows the initial query it made
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington lookup. The final query has a local query option of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington will not print the initial query when it looks up the NS records for
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a name="id2627575"></a><h2>IDN SUPPORT</h2>
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews domain name) support, it can accept and display non-ASCII domain names.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington <span><strong class="command">dig</strong></span> appropriately converts character encoding of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington domain name before sending a request to DNS server or displaying a
33b0d10552ea5f7716385b2cedff64daa1486c50Tinderbox User reply from the server.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews If you'd like to turn off the IDN support for some reason, defines
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews the <code class="envar">IDN_DISABLE</code> environment variable.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews The IDN support is disabled if the variable is set when
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews <span><strong class="command">dig</strong></span> runs.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<p><code class="filename">/etc/resolv.conf</code>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington There are probably too many query options.
b7aab05edae933e169d5f83c653935b17c7f0a8bMark Andrews<table width="100%" summary="Navigation footer">
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
409ba95e573b40cf36acf97dd62ee7e9c7775851Tinderbox User<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<td width="40%" align="left" valign="top">Manual pages�</td>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington<td width="40%" align="right" valign="top">�host</td>