man.dig.html revision d95b19f839f5bad2d1c25577fd334907bd90656c
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - Copyright (C) 2000-2017 Internet Systems Consortium, Inc. ("ISC")
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - This Source Code Form is subject to the terms of the Mozilla Public
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - License, v. 2.0. If a copy of the MPL was not distributed with this
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - file, You can obtain one at http://mozilla.org/MPL/2.0/.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<link rel="prev" href="Bv9ARM.ch13.html" title="Manual pages">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<link rel="next" href="man.mdig.html" title="mdig">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="20%" align="right">�<a accesskey="n" href="man.mdig.html">Next</a>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<a name="man.dig"></a><div class="titlepage"></div>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte — DNS lookup utility
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-b <em class="replaceable"><code>address</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-c <em class="replaceable"><code>class</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-q <em class="replaceable"><code>name</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-t <em class="replaceable"><code>type</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [queryopt...]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [global-queryopt...]
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <p><span class="command"><strong>dig</strong></span> is a flexible tool
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for interrogating DNS name servers. It performs DNS lookups and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte displays the answers that are returned from the name server(s) that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte were queried. Most DNS administrators use <span class="command"><strong>dig</strong></span> to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte troubleshoot DNS problems because of its flexibility, ease of use and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte clarity of output. Other lookup tools tend to have less functionality
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte than <span class="command"><strong>dig</strong></span>.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Although <span class="command"><strong>dig</strong></span> is normally used with
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte command-line
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte arguments, it also has a batch mode of operation for reading lookup
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte requests from a file. A brief summary of its command-line arguments
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and options is printed when the <code class="option">-h</code> option is given.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Unlike earlier versions, the BIND 9 implementation of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> allows multiple lookups to be issued
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte command line.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Unless it is told to query a specific name server,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> will try each of the servers listed in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte are found, <span class="command"><strong>dig</strong></span> will send the query to the local
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte When no command line arguments or options are given,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> will perform an NS query for "." (the root).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte It is possible to set per-user defaults for <span class="command"><strong>dig</strong></span> via
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="filename">${HOME}/.digrc</code>. This file is read and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte any options in it
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte are applied before the command line arguments.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The IN and CH class names overlap with the IN and CH top level
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte domain names. Either use the <code class="option">-t</code> and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="option">-c</code> options to specify the type and class,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte use the <code class="option">-q</code> the specify the domain name, or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte use "IN." and "CH." when looking up these top level domains.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte A typical invocation of <span class="command"><strong>dig</strong></span> looks like:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<pre class="programlisting"> dig @server name type </pre>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<div class="variablelist"><dl class="variablelist">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="constant">server</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is the name or IP address of the name server to query. This
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte can be an IPv4 address in dotted-decimal notation or an IPv6
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte address in colon-delimited notation. When the supplied
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>server</code></em> argument is a hostname,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> resolves that name before querying
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that name server.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte If no <em class="parameter"><code>server</code></em> argument is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte provided, <span class="command"><strong>dig</strong></span> consults
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="filename">/etc/resolv.conf</code>; if an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte address is found there, it queries the name server at
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that address. If either of the <code class="option">-4</code> or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="option">-6</code> options are in use, then
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte only addresses for the corresponding transport
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte will be tried. If no usable addresses are found,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> will send the query to the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte local host. The reply from the name server that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte responds is displayed.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="constant">name</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is the name of the resource record that is to be looked up.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="constant">type</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte indicates what type of query is required —
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ANY, A, MX, SIG, etc.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>type</code></em> can be any valid query
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>type</code></em> argument is supplied,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> will perform a lookup for an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <div class="variablelist"><dl class="variablelist">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Use IPv4 only.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Use IPv6 only.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-b <em class="replaceable"><code>address[<span class="optional">#port</span>]</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set the source IP address of the query.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The <em class="parameter"><code>address</code></em> must be a valid address on
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte one of the host's network interfaces, or "0.0.0.0" or "::". An
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte optional port may be specified by appending "#<port>"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set the query class. The
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default <em class="parameter"><code>class</code></em> is IN; other classes
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte are HS for Hesiod records or CH for Chaosnet records.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Batch mode: <span class="command"><strong>dig</strong></span> reads a list of lookup
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte requests to process from the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte given <em class="parameter"><code>file</code></em>. Each line in the file
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte should be organized in the same way they would be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte presented as queries to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> using the command-line interface.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Do reverse IPv6 lookups using the obsolete RFC1886 IP6.INT
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte domain, which is no longer in use. Obsolete bit string
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte label queries (RFC2874) are not attempted.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-k <em class="replaceable"><code>keyfile</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Sign queries using TSIG using a key read from the given file.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Key files can be generated using
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="refentrytitle">tsig-keygen</span>(8)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte When using TSIG authentication with <span class="command"><strong>dig</strong></span>,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the name server that is queried needs to know the key and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte algorithm that is being used. In BIND, this is done by
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte providing appropriate <span class="command"><strong>key</strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and <span class="command"><strong>server</strong></span> statements in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Enable memory usage debugging.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Send the query to a non-standard port on the server,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte instead of the default port 53. This option would be used
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to test a name server that has been configured to listen
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for queries on a non-standard port number.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-q <em class="replaceable"><code>name</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The domain name to query. This is useful to distinguish
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the <em class="parameter"><code>name</code></em> from other arguments.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The resource record type to query. It can be any valid query type
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte supported in BIND 9. The default query type is "A", unless the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="option">-x</code> option is supplied to indicate a reverse lookup.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte A zone transfer can be requested by specifying a type of AXFR. When
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte an incremental zone transfer (IXFR) is required, set the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>type</code></em> to <code class="literal">ixfr=N</code>.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The incremental zone transfer will contain the changes
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte made to the zone since the serial number in the zone's SOA
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Print the version number and exit.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-x <em class="replaceable"><code>addr</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Simplified reverse lookups, for mapping addresses to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte names. The <em class="parameter"><code>addr</code></em> is an IPv4 address
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in dotted-decimal notation, or a colon-delimited IPv6
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte address. When the <code class="option">-x</code> is used, there is no
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte need to provide
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte arguments. <span class="command"><strong>dig</strong></span> automatically performs a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte lookup for a name like
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="literal">94.2.0.192.in-addr.arpa</code> and sets the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte query type and class to PTR and IN respectively. IPv6
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte addresses are looked up using nibble format under the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte IP6.ARPA domain (but see also the <code class="option">-i</code>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Sign queries using TSIG with the given authentication key.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>keyname</code></em> is the name of the key, and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte valid choices are <code class="literal">hmac-md5</code>,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is not specified, the default is <code class="literal">hmac-md5</code>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or if MD5 was disabled <code class="literal">hmac-sha256</code>.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte NOTE: You should use the <code class="option">-k</code> option and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte avoid the <code class="option">-y</code> option, because
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with <code class="option">-y</code> the shared secret is supplied as
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a command line argument in clear text. This may be visible
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in the output from
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or in a history file maintained by the user's shell.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <p><span class="command"><strong>dig</strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte provides a number of query options which affect
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the way in which lookups are made and the results displayed. Some of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte these set or reset flag bits in the query header, some determine which
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte sections of the answer get printed, and others determine the timeout
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and retry strategies.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Each query option is identified by a keyword preceded by a plus sign
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (<code class="literal">+</code>). Some keywords set or reset an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte option. These may be preceded
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte by the string <code class="literal">no</code> to negate the meaning of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that keyword. Other
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte keywords assign values to options like the timeout interval. They
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte have the form <code class="option">+keyword=value</code>.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Keywords may be abbreviated, provided the abbreviation is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte unambiguous; for example, <code class="literal">+cd</code> is equivalent
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The query options are:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<div class="variablelist"><dl class="variablelist">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Sets the "aa" flag in the query.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Display [do not display] the additional section of a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte reply. The default is to display it.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set [do not set] the AD (authentic data) bit in the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte query. This requests the server to return whether
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte all of the answer and authority sections have all
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte been validated as secure according to the security
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte policy of the server. AD=1 indicates that all records
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte have been validated as secure and the answer is not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte from a OPT-OUT range. AD=0 indicate that some part
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of the answer was insecure or not validated. This
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte bit is set by default.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]all</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set or clear all display flags.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Display [do not display] the answer section of a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte reply. The default is to display it.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Display [do not display] the authority section of a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte reply. The default is to display it.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]badcookie</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Retry lookup with the new server cookie if a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte BADCOOKIE response is received.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Attempt to display the contents of messages which are
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte malformed. The default is to not display malformed
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set the UDP message buffer size advertised using EDNS0
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to <em class="parameter"><code>B</code></em> bytes. The maximum and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte minimum sizes of this buffer are 65535 and 0 respectively.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Values outside this range are rounded up or down
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte appropriately. Values other than zero will cause a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte EDNS query to be sent.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set [do not set] the CD (checking disabled) bit in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the query. This requests the server to not perform
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DNSSEC validation of responses.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]class</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Display [do not display] the CLASS when printing the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Toggles the printing of the initial comment in the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte output identifying the version of <span class="command"><strong>dig</strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and the query options that have been applied. This
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte comment is printed by default.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Toggle the display of comment lines in the output.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The default is to print comments.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]cookie[<span class="optional">=####</span>]</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Send a COOKIE EDNS option, with optional
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte value. Replaying a COOKIE from a previous response will
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte allow the server to identify a previous client. The
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>+cookie</strong></span> is also set when +trace
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is set to better emulate the default queries from a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Toggle the display of cryptographic fields in DNSSEC
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte records. The contents of these field are unnecessary
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to debug most DNSSEC validation failures and removing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte them makes it easier to see the common failures. The
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default is to display the fields. When omitted they
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte are replaced by the string "[omitted]" or in the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DNSKEY case the key id is displayed as the replacement,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte e.g. "[ key id = value ]".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Deprecated, treated as a synonym for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>+[no]search</code></em>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Requests DNSSEC records be sent by setting the DNSSEC
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte OK bit (DO) in the OPT record in the additional section
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte of the query.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set the search list to contain the single domain
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>somename</code></em>, as if specified in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a <span class="command"><strong>domain</strong></span> directive in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="filename">/etc/resolv.conf</code>, and enable
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte search list processing as if the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>+search</code></em> option were given.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set the DSCP code point to be used when sending the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte query. Valid DSCP code points are in the range
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte [0..63]. By default no code point is explicitly set.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Specify the EDNS version to query with. Valid values
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte are 0 to 255. Setting the EDNS version will cause
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte a EDNS query to be sent. <code class="option">+noedns</code>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte clears the remembered EDNS version. EDNS is set to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 0 by default.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set the must-be-zero EDNS flags bits (Z bits) to the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte specified value. Decimal, hex and octal encodings are
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte accepted. Setting a named flag (e.g. DO) will silently be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ignored. By default, no Z bits are set.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]ednsnegotiation</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Enable / disable EDNS version negotiation. By default
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte EDNS version negotiation is enabled.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Specify EDNS option with code point <code class="option">code</code>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and optionally payload of <code class="option">value</code> as a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte hexadecimal string. <code class="option">code</code> can be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte either an EDNS option name (for example,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="literal">NSID</code> or <code class="literal">ECS</code>),
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or an arbitrary numeric value. <code class="option">+noednsopt</code>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte clears the EDNS options to be sent.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Send an EDNS Expire option.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Do not try the next server if you receive a SERVFAIL.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The default is to not try the next server which is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the reverse of normal stub resolver behavior.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]header-only</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Send a query with a DNS header without a question section.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The default is to add a question section. The query type
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and query name are ignored when this is set.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Show [or do not show] the IP address and port number
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that supplied the answer when the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>+short</code></em> option is enabled. If
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte short form answers are requested, the default is not
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to show the source address and port number of the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte server that provided the answer.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]idnout</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Convert [do not convert] puny code on output.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte This requires IDN SUPPORT to have been enabled at
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte compile time. The default is to convert output.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Ignore truncation in UDP responses instead of retrying
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with TCP. By default, TCP retries are performed.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Keep the TCP socket open between queries and reuse
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte it rather than creating a new TCP socket for each
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte lookup. The default is <code class="option">+nokeepopen</code>.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]mapped</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Allow mapped IPv4 over IPv6 addresses to be used. The
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Print records like the SOA records in a verbose
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte multi-line format with human-readable comments. The
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default is to print each record on a single line, to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte facilitate machine parsing of the <span class="command"><strong>dig</strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set the number of dots that have to appear in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for it to be considered absolute. The default value
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is that defined using the ndots statement in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="filename">/etc/resolv.conf</code>, or 1 if no
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte ndots statement is present. Names with fewer dots
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte are interpreted as relative names and will be searched
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for in the domains listed in the <code class="option">search</code>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or <code class="option">domain</code> directive in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="filename">/etc/resolv.conf</code> if
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Include an EDNS name server ID request when sending
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte When this option is set, <span class="command"><strong>dig</strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte attempts to find the authoritative name servers for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the zone containing the name being looked up and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte display the SOA record that each name server has for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Print only one (starting) SOA record when performing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte an AXFR. The default is to print both the starting
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte and ending SOA records.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]opcode=value</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set [restore] the DNS message opcode to the specified
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte value. The default value is QUERY (0).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Print [do not print] the query as it is sent. By
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default, the query is not printed.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]question</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Print [do not print] the question section of a query
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when an answer is returned. The default is to print
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the question section as a comment.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]rdflag</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte A synonym for <em class="parameter"><code>+[no]recurse</code></em>.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Toggle the setting of the RD (recursion desired) bit
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in the query. This bit is set by default, which means
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> normally sends recursive
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte queries. Recursion is automatically disabled when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the <em class="parameter"><code>+nssearch</code></em> or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>+trace</code></em> query options are used.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+retry=T</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Sets the number of times to retry UDP queries to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte server to <em class="parameter"><code>T</code></em> instead of the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte this does not include the initial query.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Toggle the display of per-record comments in the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte output (for example, human-readable key information
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte about DNSKEY records). The default is not to print
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte record comments unless multiline mode is active.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]search</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Use [do not use] the search list defined by the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte searchlist or domain directive in
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="filename">resolv.conf</code> (if any). The search
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte list is not used by default.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 'ndots' from <code class="filename">resolv.conf</code> (default 1)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte which may be overridden by <em class="parameter"><code>+ndots</code></em>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte determines if the name will be treated as relative
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte or not and hence whether a search is eventually
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte performed or not.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]short</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Provide a terse answer. The default is to print the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte answer in a verbose form.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Perform [do not perform] a search showing intermediate
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Chase DNSSEC signature chains. Requires dig be compiled
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with -DDIG_SIGCHASE. This feature is deprecated.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Use <span class="command"><strong>delv</strong></span> instead.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+split=W</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Split long hex- or base64-formatted fields in resource
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte records into chunks of <em class="parameter"><code>W</code></em>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte characters (where <em class="parameter"><code>W</code></em> is rounded
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte up to the nearest multiple of 4).
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>+nosplit</code></em> or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>+split=0</code></em> causes fields not to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte be split at all. The default is 56 characters, or
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 44 characters when multiline mode is active.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte This query option toggles the printing of statistics:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte when the query was made, the size of the reply and
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte so on. The default behavior is to print the query
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]subnet=addr[/prefix-length]</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Send (don't send) an EDNS Client Subnet option with the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte specified IP address or network prefix.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig +subnet=0.0.0.0/0</strong></span>, or simply
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig +subnet=0</strong></span> for short, sends an EDNS
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte CLIENT-SUBNET option with an empty address and a source
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte prefix-length of zero, which signals a resolver that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the client's address information must
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="emphasis"><em>not</em></span> be used when resolving
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Use [do not use] TCP when querying name servers. The
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte default behavior is to use UDP unless a type
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="literal">any</code> or <code class="literal">ixfr=N</code>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte query is requested, in which case the default is TCP.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte AXFR queries always use TCP.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+timeout=T</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Sets the timeout for a query to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>T</code></em> seconds. The default
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte timeout is 5 seconds.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte An attempt to set <em class="parameter"><code>T</code></em> to less
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte than 1 will result
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in a query timeout of 1 second being applied.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte When chasing DNSSEC signature chains perform a top-down
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte validation. Requires dig be compiled with -DDIG_SIGCHASE.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte This feature is deprecated. Use <span class="command"><strong>delv</strong></span> instead.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Toggle tracing of the delegation path from the root
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte name servers for the name being looked up. Tracing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is disabled by default. When tracing is enabled,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> makes iterative queries to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte resolve the name being looked up. It will follow
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte referrals from the root servers, showing the answer
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte from each server that was used to resolve the lookup.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte If @server is also specified, it affects only the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte initial query for the root zone name servers.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>+dnssec</strong></span> is also set when +trace
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is set to better emulate the default queries from a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+tries=T</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Sets the number of times to try UDP queries to server
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to <em class="parameter"><code>T</code></em> instead of the default,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte 3. If <em class="parameter"><code>T</code></em> is less than or equal
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to zero, the number of tries is silently rounded up
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Specifies a file containing trusted keys to be used
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte with <code class="option">+sigchase</code>. Each DNSKEY record
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte must be on its own line.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte If not specified, <span class="command"><strong>dig</strong></span> will look
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for <code class="filename">/etc/trusted-key.key</code> then
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <code class="filename">trusted-key.key</code> in the current
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Requires dig be compiled with -DDIG_SIGCHASE.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte This feature is deprecated. Use <span class="command"><strong>delv</strong></span> instead.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Display [do not display] the TTL when printing the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Display [do not display] the TTL in friendly human-readable
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte time units of "s", "m", "h", "d", and "w", representing
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte seconds, minutes, hours, days and weeks. Implies +ttlid.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]unknownformat</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Print all RDATA in unknown RR type presentation format
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte (RFC 3597). The default is to print RDATA for known types
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in the type's presentation format.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Use [do not use] TCP when querying name servers. This
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte is provided for backwards compatibility. The "vc"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte stands for "virtual circuit".
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Set [do not set] the last unassigned DNS header flag in a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte DNS query. This flag is off by default.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<a name="id-1.14.2.11"></a><h2>MULTIPLE QUERIES</h2>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The BIND 9 implementation of <span class="command"><strong>dig </strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte specifying multiple queries on the command line (in addition to
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte supporting the <code class="option">-f</code> batch file option). Each of those
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte queries can be supplied with its own set of flags, options and query
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte In this case, each <em class="parameter"><code>query</code></em> argument
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte represent an
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte individual query in the command-line syntax described above. Each
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte consists of any of the standard options and flags, the name to be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte looked up, an optional query type and class and any query options that
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte should be applied to that query.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte A global set of query options, which should be applied to all queries,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte can also be supplied. These global query options must precede the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte first tuple of name, class, type, options, flags, and query options
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte supplied on the command line. Any global query options (except
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the <code class="option">+[no]cmd</code> option) can be
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte overridden by a query-specific set of query options. For example:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Fortedig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte shows how <span class="command"><strong>dig</strong></span> could be used from the
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte command line
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte reverse lookup of 127.0.0.1 and a query for the NS records of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte A global query option of <em class="parameter"><code>+qr</code></em> is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte that <span class="command"><strong>dig</strong></span> shows the initial query it made
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte lookup. The final query has a local query option of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <em class="parameter"><code>+noqr</code></em> which means that <span class="command"><strong>dig</strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte will not print the initial query when it looks up the NS records for
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte If <span class="command"><strong>dig</strong></span> has been built with IDN (internationalized
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte domain name) support, it can accept and display non-ASCII domain names.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> appropriately converts character encoding of
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte domain name before sending a request to DNS server or displaying a
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte reply from the server.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte If you'd like to turn off the IDN support for some reason, defines
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte the <code class="envar">IDN_DISABLE</code> environment variable.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte The IDN support is disabled if the variable is set when
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="command"><strong>dig</strong></span> runs.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <p><code class="filename">/etc/resolv.conf</code>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="refentrytitle">dnssec-keygen</span>(8)
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte There are probably too many query options.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="40%" align="right">�<a accesskey="n" href="man.mdig.html">Next</a>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="40%" align="left" valign="top">Manual pages�</td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="40%" align="right" valign="top">�<span class="application">mdig</span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.2</p>