man.dig.html revision e21a2904f02a03fa06b6db04d348f65fe9c67b2b
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein - Copyright (C) 2004-2006 Internet Systems Consortium, Inc. ("ISC")
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein - Copyright (C) 2000-2003 Internet Software Consortium.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews - Permission to use, copy, modify, and distribute this software for any
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews - purpose with or without fee is hereby granted, provided that the above
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson - copyright notice and this permission notice appear in all copies.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews<!-- $Id: man.dig.html,v 1.36 2006/12/12 01:45:21 marka Exp $ -->
f5d30e2864e048a42c4dc1134993ae7efdb5d6c3Mark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson<link rel="next" href="man.host.html" title="host">
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<a name="man.dig"></a><div class="titlepage"></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<p><span><strong class="command">dig</strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein (domain information groper) is a flexible tool
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein for interrogating DNS name servers. It performs DNS lookups and
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein displays the answers that are returned from the name server(s) that
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein troubleshoot DNS problems because of its flexibility, ease of use and
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein clarity of output. Other lookup tools tend to have less functionality
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein than <span><strong class="command">dig</strong></span>.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Although <span><strong class="command">dig</strong></span> is normally used with
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein command-line
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein arguments, it also has a batch mode of operation for reading lookup
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson requests from a file. A brief summary of its command-line arguments
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson and options is printed when the <code class="option">-h</code> option is given.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson Unlike earlier versions, the BIND9 implementation of
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson Unless it is told to query a specific name server,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span><strong class="command">dig</strong></span> will try each of the servers listed
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson When no command line arguments or options are given, will perform an
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein NS query for "." (the root).
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <code class="filename">${HOME}/.digrc</code>. This file is read and
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson any options in it
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein are applied before the command line arguments.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson A typical invocation of <span><strong class="command">dig</strong></span> looks like:
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<pre class="programlisting"> dig @server name type </pre>
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson<dt><span class="term"><code class="constant">server</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein is the name or IP address of the name server to query. This can
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson address in dotted-decimal notation or an IPv6
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein address in colon-delimited notation. When the supplied
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>server</code></em> argument is a
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson <span><strong class="command">dig</strong></span> resolves that name before
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein querying that name
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson server. If no <em class="parameter"><code>server</code></em>
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson argument is provided,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein and queries the name servers listed there. The reply from the
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson server that responds is displayed.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson<dt><span class="term"><code class="constant">name</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein is the name of the resource record that is to be looked up.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="constant">type</code></span></dt>
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson indicates what type of query is required —
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein ANY, A, MX, SIG, etc.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson <em class="parameter"><code>type</code></em> can be any valid query
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>type</code></em> argument is supplied,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span><strong class="command">dig</strong></span> will perform a lookup for an
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson The <code class="option">-b</code> option sets the source IP address of the query
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein to <em class="parameter"><code>address</code></em>. This must be a valid
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson one of the host's network interfaces or "0.0.0.0" or "::". An optional
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein may be specified by appending "#<port>"
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson The default query class (IN for internet) is overridden by the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson class, such as HS for Hesiod records or CH for CHAOSNET records.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein in batch mode by reading a list of lookup requests to process from the
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson file <em class="parameter"><code>filename</code></em>. The file contains a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein queries, one per line. Each entry in the file should be organised in
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein the same way they would be presented as queries to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span><strong class="command">dig</strong></span> using the command-line interface.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein If a non-standard port number is to be queried, the
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson the port number that <span><strong class="command">dig</strong></span> will send its
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein instead of the standard DNS port number 53. This option would be used
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson to test a name server that has been configured to listen for queries
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson on a non-standard port number.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein use IPv4 query transport. The <code class="option">-6</code> option forces
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <code class="option">-t</code> option sets the query type to
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson <em class="parameter"><code>type</code></em>. It can be any valid query type
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein supported in BIND9. The default query type "A", unless the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <code class="option">-x</code> option is supplied to indicate a reverse lookup.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein A zone transfer can be requested by specifying a type of AXFR. When
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein an incremental zone transfer (IXFR) is required,
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson The incremental zone transfer will contain the changes made to the zone
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein since the serial number in the zone's SOA record was
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson <em class="parameter"><code>N</code></em>.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <code class="option">-q</code> option sets the query name to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>name</code></em>. This useful do distingish the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>name</code></em> from other arguments.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Reverse lookups - mapping addresses to names - are simplified by the
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson address in dotted-decimal notation, or a colon-delimited IPv6 address.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein When this option is used, there is no need to provide the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein automatically performs a lookup for a name like
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein query type and
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein class to PTR and IN respectively. By default, IPv6 addresses are
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein looked up using nibble format under the IP6.ARPA domain.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein To use the older RFC1886 method using the IP6.INT domain
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein are now experimental and are not attempted.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein responses using transaction signatures (TSIG), specify a TSIG key file
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein using the <code class="option">-k</code> option. You can also specify the TSIG
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein key itself on the command line using the <code class="option">-y</code> option;
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>name</code></em> is the name of the TSIG key and
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>key</code></em> is the actual key. The key is a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein encoded string, typically generated by
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Caution should be taken when using the <code class="option">-y</code> option on
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein multi-user systems as the key can be visible in the output from
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein or in the shell's history file. When
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein server that is queried needs to know the key and algorithm that is
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein being used. In BIND, this is done by providing appropriate
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<p><span><strong class="command">dig</strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein provides a number of query options which affect
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein the way in which lookups are made and the results displayed. Some of
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein these set or reset flag bits in the query header, some determine which
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein sections of the answer get printed, and others determine the timeout
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein and retry strategies.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson Each query option is identified by a keyword preceded by a plus sign
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson (<code class="literal">+</code>). Some keywords set or reset an
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson option. These may be preceded
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson by the string <code class="literal">no</code> to negate the meaning of
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson that keyword. Other
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson keywords assign values to options like the timeout interval. They
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein have the form <code class="option">+keyword=value</code>.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The query options are:
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson Use [do not use] TCP when querying name servers. The default
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein behaviour is to use UDP unless an AXFR or IXFR query is
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein requested, in
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein which case a TCP connection is used.
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson Use [do not use] TCP when querying name servers. This alternate
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson syntax to <em class="parameter"><code>+[no]tcp</code></em> is
9ffbbce6a624b6051b3d001edcbad1e02c69bd45Andreas Gustafsson provided for backwards
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein compatibility. The "vc" stands for "virtual circuit".
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Ignore truncation in UDP responses instead of retrying with TCP.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein default, TCP retries are performed.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Set the search list to contain the single domain
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>somename</code></em>, as if specified in
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span><strong class="command">domain</strong></span> directive in
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <code class="filename">/etc/resolv.conf</code>, and enable
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein processing as if the <em class="parameter"><code>+search</code></em>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein option were given.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]search</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Use [do not use] the search list defined by the searchlist or
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein directive in <code class="filename">resolv.conf</code> (if
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The search list is not used by default.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Perform [do not perform] a search showing intermediate
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Sets the "aa" flag in the query.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Set [do not set] the AD (authentic data) bit in the query. The
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein currently has a standard meaning only in responses, not in
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein but the ability to set the bit in the query is provided for
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein completeness.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Set [do not set] the CD (checking disabled) bit in the query.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein requests the server to not perform DNSSEC validation of
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Display [do not display] the CLASS when printing the record.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Display [do not display] the TTL when printing the record.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Toggle the setting of the RD (recursion desired) bit in the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein This bit is set by default, which means <span><strong class="command">dig</strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein normally sends recursive queries. Recursion is automatically
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein when the <em class="parameter"><code>+nssearch</code></em> or
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>+trace</code></em> query options are
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein When this option is set, <span><strong class="command">dig</strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein attempts to find the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein authoritative name servers for the zone containing the name
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein looked up and display the SOA record that each name server has
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Toggle tracing of the delegation path from the root name servers
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein the name being looked up. Tracing is disabled by default. When
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein tracing is enabled, <span><strong class="command">dig</strong></span> makes
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein iterative queries to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein resolve the name being looked up. It will follow referrals from
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein root servers, showing the answer from each server that was used
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein resolve the lookup.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein toggles the printing of the initial comment in the output
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein the version of <span><strong class="command">dig</strong></span> and the query
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein options that have
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein been applied. This comment is printed by default.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]short</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Provide a terse answer. The default is to print the answer in a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein verbose form.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Show [or do not show] the IP address and port number that
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein supplied the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein answer when the <em class="parameter"><code>+short</code></em> option
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein is enabled. If
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein short form answers are requested, the default is not to show the
<em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be