man.dig.html revision a1b05dea35aa30b152a47115e18bbe679d3fcf19
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - Permission to use, copy, modify, and distribute this software for any
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - purpose with or without fee is hereby granted, provided that the above
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - copyright notice and this permission notice appear in all copies.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync - PERFORMANCE OF THIS SOFTWARE.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<!-- $Id: man.dig.html,v 1.48 2007/05/16 06:12:02 marka Exp $ -->
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<p><span><strong class="command">dig</strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync (domain information groper) is a flexible tool
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync for interrogating DNS name servers. It performs DNS lookups and
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync displays the answers that are returned from the name server(s) that
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync troubleshoot DNS problems because of its flexibility, ease of use and
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync clarity of output. Other lookup tools tend to have less functionality
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync than <span><strong class="command">dig</strong></span>.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Although <span><strong class="command">dig</strong></span> is normally used with
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync command-line
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync arguments, it also has a batch mode of operation for reading lookup
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync requests from a file. A brief summary of its command-line arguments
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync and options is printed when the <code class="option">-h</code> option is given.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Unlike earlier versions, the BIND 9 implementation of
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync command line.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Unless it is told to query a specific name server,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> will try each of the servers listed
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync When no command line arguments or options are given, will perform an
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync NS query for "." (the root).
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="filename">${HOME}/.digrc</code>. This file is read and
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync any options in it
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync are applied before the command line arguments.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The IN and CH class names overlap with the IN and CH top level
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync domains names. Either use the <code class="option">-t</code> and
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="option">-c</code> options to specify the type and class or
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync use the <code class="option">-q</code> the specify the domain name or
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync use "IN." and "CH." when looking up these top level domains.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync A typical invocation of <span><strong class="command">dig</strong></span> looks like:
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<pre class="programlisting"> dig @server name type </pre>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="constant">server</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync is the name or IP address of the name server to query. This can
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync address in dotted-decimal notation or an IPv6
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync address in colon-delimited notation. When the supplied
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>server</code></em> argument is a
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> resolves that name before
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync querying that name
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync server. If no <em class="parameter"><code>server</code></em>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync argument is provided,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync and queries the name servers listed there. The reply from the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync server that responds is displayed.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="constant">name</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync is the name of the resource record that is to be looked up.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="constant">type</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync indicates what type of query is required —
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync ANY, A, MX, SIG, etc.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>type</code></em> can be any valid query
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync type. If no
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>type</code></em> argument is supplied,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> will perform a lookup for an
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The <code class="option">-b</code> option sets the source IP address of the query
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync to <em class="parameter"><code>address</code></em>. This must be a valid
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync one of the host's network interfaces or "0.0.0.0" or "::". An optional
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync may be specified by appending "#<port>"
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The default query class (IN for internet) is overridden by the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync class, such as HS for Hesiod records or CH for Chaosnet records.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync in batch mode by reading a list of lookup requests to process from the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync file <em class="parameter"><code>filename</code></em>. The file contains a
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync queries, one per line. Each entry in the file should be organized in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync the same way they would be presented as queries to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> using the command-line interface.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync If a non-standard port number is to be queried, the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync the port number that <span><strong class="command">dig</strong></span> will send its
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync instead of the standard DNS port number 53. This option would be used
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync to test a name server that has been configured to listen for queries
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync on a non-standard port number.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync use IPv4 query transport. The <code class="option">-6</code> option forces
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The <code class="option">-t</code> option sets the query type to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>type</code></em>. It can be any valid query type
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync supported in BIND 9. The default query type is "A", unless the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="option">-x</code> option is supplied to indicate a reverse lookup.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync A zone transfer can be requested by specifying a type of AXFR. When
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync an incremental zone transfer (IXFR) is required,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The incremental zone transfer will contain the changes made to the zone
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync since the serial number in the zone's SOA record was
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The <code class="option">-q</code> option sets the query name to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>name</code></em>. This useful do distinguish the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>name</code></em> from other arguments.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Reverse lookups — mapping addresses to names — are simplified by the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync address in dotted-decimal notation, or a colon-delimited IPv6 address.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync When this option is used, there is no need to provide the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync automatically performs a lookup for a name like
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync query type and
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync class to PTR and IN respectively. By default, IPv6 addresses are
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync looked up using nibble format under the IP6.ARPA domain.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync To use the older RFC1886 method using the IP6.INT domain
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync are now experimental and are not attempted.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync responses using transaction signatures (TSIG), specify a TSIG key file
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync using the <code class="option">-k</code> option. You can also specify the TSIG
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync key itself on the command line using the <code class="option">-y</code> option;
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>name</code></em> is the name of the TSIG key and
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>key</code></em> is the actual key. The key is a
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync encoded string, typically generated by
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Caution should be taken when using the <code class="option">-y</code> option on
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync multi-user systems as the key can be visible in the output from
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync or in the shell's history file. When
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync server that is queried needs to know the key and algorithm that is
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync being used. In BIND, this is done by providing appropriate
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<p><span><strong class="command">dig</strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync provides a number of query options which affect
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync the way in which lookups are made and the results displayed. Some of
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync these set or reset flag bits in the query header, some determine which
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync sections of the answer get printed, and others determine the timeout
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync and retry strategies.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Each query option is identified by a keyword preceded by a plus sign
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync (<code class="literal">+</code>). Some keywords set or reset an
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync option. These may be preceded
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync by the string <code class="literal">no</code> to negate the meaning of
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync that keyword. Other
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync keywords assign values to options like the timeout interval. They
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync have the form <code class="option">+keyword=value</code>.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The query options are:
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Use [do not use] TCP when querying name servers. The default
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync behavior is to use UDP unless an AXFR or IXFR query is
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync requested, in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync which case a TCP connection is used.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Use [do not use] TCP when querying name servers. This alternate
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync syntax to <em class="parameter"><code>+[no]tcp</code></em> is
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync provided for backwards
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync compatibility. The "vc" stands for "virtual circuit".
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Ignore truncation in UDP responses instead of retrying with TCP.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync default, TCP retries are performed.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Set the search list to contain the single domain
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>somename</code></em>, as if specified in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">domain</strong></span> directive in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="filename">/etc/resolv.conf</code>, and enable
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync search list
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync processing as if the <em class="parameter"><code>+search</code></em>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync option were given.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]search</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Use [do not use] the search list defined by the searchlist or
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync directive in <code class="filename">resolv.conf</code> (if
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The search list is not used by default.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Perform [do not perform] a search showing intermediate
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Sets the "aa" flag in the query.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Set [do not set] the AD (authentic data) bit in the query. The
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync currently has a standard meaning only in responses, not in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync but the ability to set the bit in the query is provided for
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync completeness.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Set [do not set] the CD (checking disabled) bit in the query.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync requests the server to not perform DNSSEC validation of
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Display [do not display] the CLASS when printing the record.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Display [do not display] the TTL when printing the record.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Toggle the setting of the RD (recursion desired) bit in the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync This bit is set by default, which means <span><strong class="command">dig</strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync normally sends recursive queries. Recursion is automatically
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync when the <em class="parameter"><code>+nssearch</code></em> or
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>+trace</code></em> query options are
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync When this option is set, <span><strong class="command">dig</strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync attempts to find the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync authoritative name servers for the zone containing the name
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync looked up and display the SOA record that each name server has
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Toggle tracing of the delegation path from the root name servers
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync the name being looked up. Tracing is disabled by default. When
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync tracing is enabled, <span><strong class="command">dig</strong></span> makes
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync iterative queries to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync resolve the name being looked up. It will follow referrals from
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync root servers, showing the answer from each server that was used
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync resolve the lookup.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Toggles the printing of the initial comment in the output
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync identifying
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync the version of <span><strong class="command">dig</strong></span> and the query
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync options that have
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync been applied. This comment is printed by default.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]short</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Provide a terse answer. The default is to print the answer in a
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync verbose form.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Show [or do not show] the IP address and port number that
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync supplied the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync answer when the <em class="parameter"><code>+short</code></em> option
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync is enabled. If
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync short form answers are requested, the default is not to show the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync source address and port number of the server that provided the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Toggle the display of comment lines in the output. The default
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync print comments.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync This query option toggles the printing of statistics: when the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync was made, the size of the reply and so on. The default
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync behavior is
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync to print the query statistics.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Print [do not print] the query as it is sent.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync By default, the query is not printed.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]question</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Print [do not print] the question section of a query when an
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync returned. The default is to print the question section as a
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Display [do not display] the answer section of a reply. The
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync is to display it.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Display [do not display] the authority section of a reply. The
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync default is to display it.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Display [do not display] the additional section of a reply.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The default is to display it.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]all</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Set or clear all display flags.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+time=T</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Sets the timeout for a query to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>T</code></em> seconds. The default
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync timeout is 5 seconds.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync An attempt to set <em class="parameter"><code>T</code></em> to less
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync than 1 will result
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync in a query timeout of 1 second being applied.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+tries=T</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Sets the number of times to try UDP queries to server to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>T</code></em> instead of the default, 3.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>T</code></em> is less than or equal to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync zero, the number of
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync tries is silently rounded up to 1.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+retry=T</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Sets the number of times to retry UDP queries to server to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>T</code></em> instead of the default, 2.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>+tries</code></em>, this does not include
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync the initial
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Set the number of dots that have to appear in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync considered absolute. The default value is that defined using
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync ndots statement is present. Names with fewer dots are
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync interpreted as
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync relative names and will be searched for in the domains listed in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="option">search</code> or <code class="option">domain</code> directive in
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Set the UDP message buffer size advertised using EDNS0 to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync of this buffer are 65535 and 0 respectively. Values outside
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync this range are rounded up or down appropriately.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Values other than zero will cause a EDNS query to be sent.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+edns=#</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Specify the EDNS version to query with. Valid values
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync are 0 to 255. Setting the EDNS version will cause a
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync EDNS query to be sent. <code class="option">+noedns</code> clears the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync remembered EDNS version.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Print records like the SOA records in a verbose multi-line
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync format with human-readable comments. The default is to print
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync each record on a single line, to facilitate machine parsing
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync of the <span><strong class="command">dig</strong></span> output.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Do not try the next server if you receive a SERVFAIL. The
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync to not try the next server which is the reverse of normal stub
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Attempt to display the contents of messages which are malformed.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The default is to not display malformed answers.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Requests DNSSEC records be sent by setting the DNSSEC OK bit
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync in the OPT record in the additional section of the query.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Chase DNSSEC signature chains. Requires dig be compiled with
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync -DDIG_SIGCHASE.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Specifies a file containing trusted keys to be used with
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="option">+sigchase</code>. Each DNSKEY record must be
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync on its own line.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync If not specified <span><strong class="command">dig</strong></span> will look for
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="filename">/etc/trusted-key.key</code> then
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <code class="filename">trusted-key.key</code> in the current directory.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Requires dig be compiled with -DDIG_SIGCHASE.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync When chasing DNSSEC signature chains perform a top-down
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync validation.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync Requires dig be compiled with -DDIG_SIGCHASE.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The BIND 9 implementation of <span><strong class="command">dig </strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync specifying multiple queries on the command line (in addition to
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync supporting the <code class="option">-f</code> batch file option). Each of those
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync queries can be supplied with its own set of flags, options and query
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync In this case, each <em class="parameter"><code>query</code></em> argument
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync represent an
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync individual query in the command-line syntax described above. Each
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync consists of any of the standard options and flags, the name to be
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync looked up, an optional query type and class and any query options that
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync should be applied to that query.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync A global set of query options, which should be applied to all queries,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync can also be supplied. These global query options must precede the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync first tuple of name, class, type, options, flags, and query options
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync supplied on the command line. Any global query options (except
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync the <code class="option">+[no]cmd</code> option) can be
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync overridden by a query-specific set of query options. For example:
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsyncdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync shows how <span><strong class="command">dig</strong></span> could be used from the
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync command line
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync reverse lookup of 127.0.0.1 and a query for the NS records of
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync A global query option of <em class="parameter"><code>+qr</code></em> is
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync applied, so
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync that <span><strong class="command">dig</strong></span> shows the initial query it made
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync lookup. The final query has a local query option of
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync will not print the initial query when it looks up the NS records for
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync domain name) support, it can accept and display non-ASCII domain names.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> appropriately converts character encoding of
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync domain name before sending a request to DNS server or displaying a
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync reply from the server.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync If you'd like to turn off the IDN support for some reason, defines
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync the <code class="envar">IDN_DISABLE</code> environment variable.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync The IDN support is disabled if the variable is set when
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span><strong class="command">dig</strong></span> runs.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync There are probably too many query options.
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<td width="40%" align="left" valign="top">Manual pages�</td>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
16a8d09569a2ebd598cef72fa605be6fb4563607vboxsync<td width="40%" align="right" valign="top">�host</td>