man.dig.html revision 09d72af3e9961c210d7baa6179165b6cd81e8dd0
fa9e4066f08beec538e775443c5be79dd423fcabahrens - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
fa9e4066f08beec538e775443c5be79dd423fcabahrens - Copyright (C) 2000-2003 Internet Software Consortium.
ea8dc4b6d2251b437950c0056bc626b311c73c27eschrock - Permission to use, copy, modify, and/or distribute this software for any
ea8dc4b6d2251b437950c0056bc626b311c73c27eschrock - purpose with or without fee is hereby granted, provided that the above
fa9e4066f08beec538e775443c5be79dd423fcabahrens - copyright notice and this permission notice appear in all copies.
fa9e4066f08beec538e775443c5be79dd423fcabahrens - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
fa9e4066f08beec538e775443c5be79dd423fcabahrens - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
fa9e4066f08beec538e775443c5be79dd423fcabahrens - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
fa9e4066f08beec538e775443c5be79dd423fcabahrens - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
fa9e4066f08beec538e775443c5be79dd423fcabahrens - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
fa9e4066f08beec538e775443c5be79dd423fcabahrens - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
fa9e4066f08beec538e775443c5be79dd423fcabahrens - PERFORMANCE OF THIS SOFTWARE.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<!-- $Id$ -->
fa9e4066f08beec538e775443c5be79dd423fcabahrens<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fa9e4066f08beec538e775443c5be79dd423fcabahrens<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
f9af39bacaaa0f9dda3b75ff6858b9f3988a39afGeorge Wilson<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
b18d6b0e20b5bf6e2007c550bb33dcbab6b5dddcMatthew Ahrens<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
bd0f709169e67f4bd34526e186a7c34f595f0d9bAndrew Stormont<link rel="prev" href="Bv9ARM.ch13.html" title="Manual pages">
6401734d545a04c18f68b448202f9d9a77216bb9Will Andrews<link rel="next" href="man.host.html" title="host">
fa9e4066f08beec538e775443c5be79dd423fcabahrens<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
fa9e4066f08beec538e775443c5be79dd423fcabahrens<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
fa9e4066f08beec538e775443c5be79dd423fcabahrens<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
4f67d755171a044e0b4b52782b9e87c67ac48b03Eric Taylor<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
fa9e4066f08beec538e775443c5be79dd423fcabahrens<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
fa9e4066f08beec538e775443c5be79dd423fcabahrens<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
4f67d755171a044e0b4b52782b9e87c67ac48b03Eric Taylor<p><span><strong class="command">dig</strong></span>
4f67d755171a044e0b4b52782b9e87c67ac48b03Eric Taylor (domain information groper) is a flexible tool
4f67d755171a044e0b4b52782b9e87c67ac48b03Eric Taylor for interrogating DNS name servers. It performs DNS lookups and
4f67d755171a044e0b4b52782b9e87c67ac48b03Eric Taylor displays the answers that are returned from the name server(s) that
fa9e4066f08beec538e775443c5be79dd423fcabahrens were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
fa9e4066f08beec538e775443c5be79dd423fcabahrens troubleshoot DNS problems because of its flexibility, ease of use and
fa9e4066f08beec538e775443c5be79dd423fcabahrens clarity of output. Other lookup tools tend to have less functionality
fa9e4066f08beec538e775443c5be79dd423fcabahrens than <span><strong class="command">dig</strong></span>.
fa9e4066f08beec538e775443c5be79dd423fcabahrens Although <span><strong class="command">dig</strong></span> is normally used with
fa9e4066f08beec538e775443c5be79dd423fcabahrens command-line
fa9e4066f08beec538e775443c5be79dd423fcabahrens arguments, it also has a batch mode of operation for reading lookup
fa9e4066f08beec538e775443c5be79dd423fcabahrens requests from a file. A brief summary of its command-line arguments
fa9e4066f08beec538e775443c5be79dd423fcabahrens and options is printed when the <code class="option">-h</code> option is given.
fa9e4066f08beec538e775443c5be79dd423fcabahrens Unlike earlier versions, the BIND 9 implementation of
fa9e4066f08beec538e775443c5be79dd423fcabahrens <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
fa9e4066f08beec538e775443c5be79dd423fcabahrens command line.
fa9e4066f08beec538e775443c5be79dd423fcabahrens Unless it is told to query a specific name server,
fa9e4066f08beec538e775443c5be79dd423fcabahrens <span><strong class="command">dig</strong></span> will try each of the servers listed in
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
fa9e4066f08beec538e775443c5be79dd423fcabahrens are found, <span><strong class="command">dig</strong></span> will send the query to the local
fa9e4066f08beec538e775443c5be79dd423fcabahrens When no command line arguments or options are given,
fa9e4066f08beec538e775443c5be79dd423fcabahrens <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
99653d4ee642c6528e88224f12409a5f23060994eschrock It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="filename">${HOME}/.digrc</code>. This file is read and
fa9e4066f08beec538e775443c5be79dd423fcabahrens any options in it
fa9e4066f08beec538e775443c5be79dd423fcabahrens are applied before the command line arguments.
fa9e4066f08beec538e775443c5be79dd423fcabahrens The IN and CH class names overlap with the IN and CH top level
fa9e4066f08beec538e775443c5be79dd423fcabahrens domain names. Either use the <code class="option">-t</code> and
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="option">-c</code> options to specify the type and class,
fa9e4066f08beec538e775443c5be79dd423fcabahrens use the <code class="option">-q</code> the specify the domain name, or
fa9e4066f08beec538e775443c5be79dd423fcabahrens use "IN." and "CH." when looking up these top level domains.
fa9e4066f08beec538e775443c5be79dd423fcabahrens A typical invocation of <span><strong class="command">dig</strong></span> looks like:
fa9e4066f08beec538e775443c5be79dd423fcabahrens<pre class="programlisting"> dig @server name type </pre>
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="constant">server</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens is the name or IP address of the name server to query. This
fa9e4066f08beec538e775443c5be79dd423fcabahrens can be an IPv4 address in dotted-decimal notation or an IPv6
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock address in colon-delimited notation. When the supplied
fa9e4066f08beec538e775443c5be79dd423fcabahrens <em class="parameter"><code>server</code></em> argument is a hostname,
fa9e4066f08beec538e775443c5be79dd423fcabahrens <span><strong class="command">dig</strong></span> resolves that name before querying
fa9e4066f08beec538e775443c5be79dd423fcabahrens that name server.
fa9e4066f08beec538e775443c5be79dd423fcabahrens If no <em class="parameter"><code>server</code></em> argument is
fa9e4066f08beec538e775443c5be79dd423fcabahrens provided, <span><strong class="command">dig</strong></span> consults
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="filename">/etc/resolv.conf</code>; if an
fa9e4066f08beec538e775443c5be79dd423fcabahrens address is found there, it queries the name server at
99653d4ee642c6528e88224f12409a5f23060994eschrock that address. If either of the <code class="option">-4</code> or
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="option">-6</code> options are in use, then
fa9e4066f08beec538e775443c5be79dd423fcabahrens only addresses for the corresponding transport
fa9e4066f08beec538e775443c5be79dd423fcabahrens will be tried. If no usable addresses are found,
fa9e4066f08beec538e775443c5be79dd423fcabahrens <span><strong class="command">dig</strong></span> will send the query to the
fa9e4066f08beec538e775443c5be79dd423fcabahrens local host. The reply from the name server that
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock responds is displayed.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="constant">name</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens is the name of the resource record that is to be looked up.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="constant">type</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock indicates what type of query is required —
fa9e4066f08beec538e775443c5be79dd423fcabahrens ANY, A, MX, SIG, etc.
fa9e4066f08beec538e775443c5be79dd423fcabahrens <em class="parameter"><code>type</code></em> can be any valid query
fa9e4066f08beec538e775443c5be79dd423fcabahrens type. If no
fa9e4066f08beec538e775443c5be79dd423fcabahrens <em class="parameter"><code>type</code></em> argument is supplied,
fa9e4066f08beec538e775443c5be79dd423fcabahrens <span><strong class="command">dig</strong></span> will perform a lookup for an
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock Use IPv4 only.
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock Use IPv6 only.
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock<dt><span class="term">-b <em class="replaceable"><code>address[<span class="optional">#port</span>]</code></em></span></dt>
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock Set the source IP address of the query.
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock The <em class="parameter"><code>address</code></em> must be a valid address on
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock one of the host's network interfaces, or "0.0.0.0" or "::". An
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock optional port may be specified by appending "#<port>"
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock Set the query class. The
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock default <em class="parameter"><code>class</code></em> is IN; other classes
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock are HS for Hesiod records or CH for Chaosnet records.
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock Batch mode: <span><strong class="command">dig</strong></span> reads a list of lookup
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock requests to process from the
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock given <em class="parameter"><code>file</code></em>. Each line in the file
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock should be organized in the same way they would be
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock presented as queries to
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock <span><strong class="command">dig</strong></span> using the command-line interface.
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock Do reverse IPv6 lookups using the obsolete RFC1886 IP6.INT
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock domain, which is no longer in use. Obsolete bit string
fa9e4066f08beec538e775443c5be79dd423fcabahrens label queries (RFC2874) are not attempted.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term">-k <em class="replaceable"><code>keyfile</code></em></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Sign queries using TSIG using a key read from the given file.
99653d4ee642c6528e88224f12409a5f23060994eschrock Key files can be generated using
fa9e4066f08beec538e775443c5be79dd423fcabahrens <span class="citerefentry"><span class="refentrytitle">tsig-keygen</span>(8)</span>.
c67d9675bbc8392fe45f3a7dfbda1ad4daa1eb07eschrock When using TSIG authentication with <span><strong class="command">dig</strong></span>,
fa9e4066f08beec538e775443c5be79dd423fcabahrens the name server that is queried needs to know the key and
fa9e4066f08beec538e775443c5be79dd423fcabahrens algorithm that is being used. In BIND, this is done by
078266a5aafa880521ea55488ef3d676f35e908eMarcel Telka providing appropriate <span><strong class="command">key</strong></span>
078266a5aafa880521ea55488ef3d676f35e908eMarcel Telka and <span><strong class="command">server</strong></span> statements in
99653d4ee642c6528e88224f12409a5f23060994eschrock Enable memory usage debugging.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Send the query to a non-standard port on the server,
fa9e4066f08beec538e775443c5be79dd423fcabahrens instead of the defaut port 53. This option would be used
99653d4ee642c6528e88224f12409a5f23060994eschrock to test a name server that has been configured to listen
99653d4ee642c6528e88224f12409a5f23060994eschrock for queries on a non-standard port number.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term">-q <em class="replaceable"><code>name</code></em></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens The domain name to query. This is useful to distinguish
fa9e4066f08beec538e775443c5be79dd423fcabahrens the <em class="parameter"><code>name</code></em> from other arguments.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock The resource record type to query. It can be any valid query type
fa94a07fd0519b8abfd871ad8fe60e6bebe1e2bbbrendan supported in BIND 9. The default query type is "A", unless the
fa94a07fd0519b8abfd871ad8fe60e6bebe1e2bbbrendan <code class="option">-x</code> option is supplied to indicate a reverse lookup.
99653d4ee642c6528e88224f12409a5f23060994eschrock A zone transfer can be requested by specifying a type of AXFR. When
99653d4ee642c6528e88224f12409a5f23060994eschrock an incremental zone transfer (IXFR) is required, set the
fa94a07fd0519b8abfd871ad8fe60e6bebe1e2bbbrendan <em class="parameter"><code>type</code></em> to <code class="literal">ixfr=N</code>.
fa94a07fd0519b8abfd871ad8fe60e6bebe1e2bbbrendan The incremental zone transfer will contain the changes
99653d4ee642c6528e88224f12409a5f23060994eschrock made to the zone since the serial number in the zone's SOA
99653d4ee642c6528e88224f12409a5f23060994eschrock Print the version number and exit.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term">-x <em class="replaceable"><code>addr</code></em></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Simplified reverse lookups, for mapping addresses to
99653d4ee642c6528e88224f12409a5f23060994eschrock names. The <em class="parameter"><code>addr</code></em> is an IPv4 address
99653d4ee642c6528e88224f12409a5f23060994eschrock in dotted-decimal notation, or a colon-delimited IPv6
99653d4ee642c6528e88224f12409a5f23060994eschrock address. When the <code class="option">-x</code> is used, there is no
fa9e4066f08beec538e775443c5be79dd423fcabahrens need to provide
fa9e4066f08beec538e775443c5be79dd423fcabahrens the <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em>
fa9e4066f08beec538e775443c5be79dd423fcabahrens arguments. <span><strong class="command">dig</strong></span> automatically performs a
fa9e4066f08beec538e775443c5be79dd423fcabahrens lookup for a name like
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="literal">94.2.0.192.in-addr.arpa</code> and sets the
fa9e4066f08beec538e775443c5be79dd423fcabahrens query type and class to PTR and IN respectively. IPv6
fa9e4066f08beec538e775443c5be79dd423fcabahrens addresses are looked up using nibble format under the
fa9e4066f08beec538e775443c5be79dd423fcabahrens IP6.ARPA domain (but see also the <code class="option">-i</code>
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Sign queries using TSIG with the given authentication key.
fa9e4066f08beec538e775443c5be79dd423fcabahrens <em class="parameter"><code>keyname</code></em> is the name of the key, and
fa9e4066f08beec538e775443c5be79dd423fcabahrens <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
99653d4ee642c6528e88224f12409a5f23060994eschrock <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
fa9e4066f08beec538e775443c5be79dd423fcabahrens valid choices are <code class="literal">hmac-md5</code>,
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
fa9e4066f08beec538e775443c5be79dd423fcabahrens is not specified, the default is <code class="literal">hmac-md5</code>.
fa9e4066f08beec538e775443c5be79dd423fcabahrens NOTE: You should use the <code class="option">-k</code> option and
fa9e4066f08beec538e775443c5be79dd423fcabahrens avoid the <code class="option">-y</code> option, because
fa9e4066f08beec538e775443c5be79dd423fcabahrens with <code class="option">-y</code> the shared secret is supplied as
fa9e4066f08beec538e775443c5be79dd423fcabahrens a command line argument in clear text. This may be visible
fa9e4066f08beec538e775443c5be79dd423fcabahrens in the output from
99653d4ee642c6528e88224f12409a5f23060994eschrock <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
99653d4ee642c6528e88224f12409a5f23060994eschrock or in a history file maintained by the user's shell.
fa9e4066f08beec538e775443c5be79dd423fcabahrens provides a number of query options which affect
fa9e4066f08beec538e775443c5be79dd423fcabahrens the way in which lookups are made and the results displayed. Some of
fa9e4066f08beec538e775443c5be79dd423fcabahrens these set or reset flag bits in the query header, some determine which
fa9e4066f08beec538e775443c5be79dd423fcabahrens sections of the answer get printed, and others determine the timeout
fa9e4066f08beec538e775443c5be79dd423fcabahrens and retry strategies.
fa9e4066f08beec538e775443c5be79dd423fcabahrens Each query option is identified by a keyword preceded by a plus sign
fa9e4066f08beec538e775443c5be79dd423fcabahrens (<code class="literal">+</code>). Some keywords set or reset an
fa9e4066f08beec538e775443c5be79dd423fcabahrens option. These may be preceded
99653d4ee642c6528e88224f12409a5f23060994eschrock by the string <code class="literal">no</code> to negate the meaning of
99653d4ee642c6528e88224f12409a5f23060994eschrock that keyword. Other
99653d4ee642c6528e88224f12409a5f23060994eschrock keywords assign values to options like the timeout interval. They
99653d4ee642c6528e88224f12409a5f23060994eschrock have the form <code class="option">+keyword=value</code>.
fa9e4066f08beec538e775443c5be79dd423fcabahrens Keywords may be abbreviated, provided the abbreviation is
fa9e4066f08beec538e775443c5be79dd423fcabahrens unambiguous; for example, <code class="literal">+cd</code> is equivalent
fa9e4066f08beec538e775443c5be79dd423fcabahrens The query options are:
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Sets the "aa" flag in the query.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Display [do not display] the additional section of a
99653d4ee642c6528e88224f12409a5f23060994eschrock reply. The default is to display it.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Set [do not set] the AD (authentic data) bit in the
fa9e4066f08beec538e775443c5be79dd423fcabahrens query. This requests the server to return whether
fa9e4066f08beec538e775443c5be79dd423fcabahrens all of the answer and authority sections have all
fa9e4066f08beec538e775443c5be79dd423fcabahrens been validated as secure according to the security
fa9e4066f08beec538e775443c5be79dd423fcabahrens policy of the server. AD=1 indicates that all records
fa9e4066f08beec538e775443c5be79dd423fcabahrens have been validated as secure and the answer is not
fa9e4066f08beec538e775443c5be79dd423fcabahrens from a OPT-OUT range. AD=0 indicate that some part
fa9e4066f08beec538e775443c5be79dd423fcabahrens of the answer was insecure or not validated. This
fa9e4066f08beec538e775443c5be79dd423fcabahrens bit is set by default.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]all</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Set or clear all display flags.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Display [do not display] the answer section of a
99653d4ee642c6528e88224f12409a5f23060994eschrock reply. The default is to display it.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Display [do not display] the authority section of a
fa9e4066f08beec538e775443c5be79dd423fcabahrens reply. The default is to display it.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="option">+[no]badcookie</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Retry lookup with the new server cookie if a
eaca9bbd5f5d1e4e554da4c7108e8a03c8c33481eschrock BADCOOKIE response is received.
eaca9bbd5f5d1e4e554da4c7108e8a03c8c33481eschrock<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock Attempt to display the contents of messages which are
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock malformed. The default is to not display malformed
eaca9bbd5f5d1e4e554da4c7108e8a03c8c33481eschrock<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock Set the UDP message buffer size advertised using EDNS0
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock to <em class="parameter"><code>B</code></em> bytes. The maximum and
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock minimum sizes of this buffer are 65535 and 0 respectively.
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock Values outside this range are rounded up or down
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock appropriately. Values other than zero will cause a
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock EDNS query to be sent.
eaca9bbd5f5d1e4e554da4c7108e8a03c8c33481eschrock<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
eaca9bbd5f5d1e4e554da4c7108e8a03c8c33481eschrock Set [do not set] the CD (checking disabled) bit in
eaca9bbd5f5d1e4e554da4c7108e8a03c8c33481eschrock the query. This requests the server to not perform
eaca9bbd5f5d1e4e554da4c7108e8a03c8c33481eschrock DNSSEC validation of responses.
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock<dt><span class="term"><code class="option">+[no]class</code></span></dt>
eaca9bbd5f5d1e4e554da4c7108e8a03c8c33481eschrock Display [do not display] the CLASS when printing the
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock Toggles the printing of the initial comment in the
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock output identifying the version of <span><strong class="command">dig</strong></span>
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock and the query options that have been applied. This
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock comment is printed by default.
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock Toggle the display of comment lines in the output.
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock The default is to print comments.
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock<dt><span class="term"><code class="option">+[no]cookie[<span class="optional">=####</span>]</code></span></dt>
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock Send a COOKIE EDNS option, with optional
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock value. Replaying a COOKIE from a previous response will
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock allow the server to identify a previous client. The
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock <span><strong class="command">+cookie</strong></span> is also set when +trace
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock is set to better emulate the default queries from a
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock nameserver.
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock Toggle the display of cryptographic fields in DNSSEC
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock records. The contents of these field are unnecessary
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock to debug most DNSSEC validation failures and removing
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock them makes it easier to see the common failures. The
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock default is to display the fields. When omitted they
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock are replaced by the string "[omitted]" or in the
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock DNSKEY case the key id is displayed as the replacement,
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock e.g. "[ key id = value ]".
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Deprecated, treated as a synonym for
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <em class="parameter"><code>+[no]search</code></em>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Requests DNSSEC records be sent by setting the DNSSEC
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson OK bit (DO) in the OPT record in the additional section
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson of the query.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Set the search list to contain the single domain
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <em class="parameter"><code>somename</code></em>, as if specified in
fa9e4066f08beec538e775443c5be79dd423fcabahrens a <span><strong class="command">domain</strong></span> directive in
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="filename">/etc/resolv.conf</code>, and enable
fa9e4066f08beec538e775443c5be79dd423fcabahrens search list processing as if the
fa9e4066f08beec538e775443c5be79dd423fcabahrens <em class="parameter"><code>+search</code></em> option were given.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Set the DSCP code point to be used when sending the
3a57275a335306e90136ebd00a4689fe0ee72519ck query. Valid DSCP code points are in the range
fa9e4066f08beec538e775443c5be79dd423fcabahrens [0..63]. By default no code point is explicitly set.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Specify the EDNS version to query with. Valid values
fa94a07fd0519b8abfd871ad8fe60e6bebe1e2bbbrendan are 0 to 255. Setting the EDNS version will cause
fa94a07fd0519b8abfd871ad8fe60e6bebe1e2bbbrendan a EDNS query to be sent. <code class="option">+noedns</code>
99653d4ee642c6528e88224f12409a5f23060994eschrock clears the remembered EDNS version. EDNS is set to
fa9e4066f08beec538e775443c5be79dd423fcabahrens 0 by default.
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Set the must-be-zero EDNS flags bits (Z bits) to the
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson specified value. Decimal, hex and octal encodings are
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson accepted. Setting a named flag (e.g. DO) will silently be
99653d4ee642c6528e88224f12409a5f23060994eschrock ignored. By default, no Z bits are set.
95173954d2b811ceb583a9012c3b16e1d0dd6438ek<dt><span class="term"><code class="option">+[no]ednsnegotiation</code></span></dt>
24e697d414a4df0377b91a2875f029e7b5f97247ck Enable / disable EDNS version negotiation. By default
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson EDNS version negotiation is enabled.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Specify EDNS option with code point <code class="option">code</code>
99653d4ee642c6528e88224f12409a5f23060994eschrock and optionally payload of <code class="option">value</code> as a
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson hexadecimal string. <code class="option">+noednsopt</code>
fa9e4066f08beec538e775443c5be79dd423fcabahrens clears the EDNS options to be sent.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Send an EDNS Expire option.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Do not try the next server if you receive a SERVFAIL.
fa9e4066f08beec538e775443c5be79dd423fcabahrens The default is to not try the next server which is
99653d4ee642c6528e88224f12409a5f23060994eschrock the reverse of normal stub resolver behavior.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]header-only</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Send a query with a DNS header without a question section.
fa9e4066f08beec538e775443c5be79dd423fcabahrens The default is to add a question section. The query type
fa9e4066f08beec538e775443c5be79dd423fcabahrens and query name are ignored when this is set.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Show [or do not show] the IP address and port number
99653d4ee642c6528e88224f12409a5f23060994eschrock that supplied the answer when the
fa9e4066f08beec538e775443c5be79dd423fcabahrens <em class="parameter"><code>+short</code></em> option is enabled. If
99653d4ee642c6528e88224f12409a5f23060994eschrock short form answers are requested, the default is not
99653d4ee642c6528e88224f12409a5f23060994eschrock to show the source address and port number of the
fa9e4066f08beec538e775443c5be79dd423fcabahrens server that provided the answer.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Ignore truncation in UDP responses instead of retrying
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson with TCP. By default, TCP retries are performed.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Keep the TCP socket open between queries and reuse
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson it rather than creating a new TCP socket for each
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson lookup. The default is <code class="option">+nokeepopen</code>.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Print records like the SOA records in a verbose
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson multi-line format with human-readable comments. The
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson default is to print each record on a single line, to
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson facilitate machine parsing of the <span><strong class="command">dig</strong></span>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Set the number of dots that have to appear in
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson for it to be considered absolute. The default value
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson is that defined using the ndots statement in
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <code class="filename">/etc/resolv.conf</code>, or 1 if no
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson ndots statement is present. Names with fewer dots
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson are interpreted as relative names and will be searched
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson for in the domains listed in the <code class="option">search</code>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson or <code class="option">domain</code> directive in
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <code class="filename">/etc/resolv.conf</code> if
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Include an EDNS name server ID request when sending
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens When this option is set, <span><strong class="command">dig</strong></span>
99653d4ee642c6528e88224f12409a5f23060994eschrock attempts to find the authoritative name servers for
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson the zone containing the name being looked up and
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson display the SOA record that each name server has for
95173954d2b811ceb583a9012c3b16e1d0dd6438ek<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Print only one (starting) SOA record when performing
bda8819455defbccd06981d9a13b240b682a3d50George Wilson an AXFR. The default is to print both the starting
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson and ending SOA records.
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson<dt><span class="term"><code class="option">+[no]opcode=value</code></span></dt>
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson Set [restore] the DNS message opcode to the specified
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson value. The default value is QUERY (0).
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson Print [do not print] the query as it is sent. By
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson default, the query is not printed.
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson<dt><span class="term"><code class="option">+[no]question</code></span></dt>
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson Print [do not print] the question section of a query
8704186e373c9ed74daa395ff3f7fd745396df9eDan McDonald when an answer is returned. The default is to print
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson the question section as a comment.
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson<dt><span class="term"><code class="option">+[no]rdflag</code></span></dt>
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson A synonym for <em class="parameter"><code>+[no]recurse</code></em>.
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
8704186e373c9ed74daa395ff3f7fd745396df9eDan McDonald Toggle the setting of the RD (recursion desired) bit
95173954d2b811ceb583a9012c3b16e1d0dd6438ek in the query. This bit is set by default, which means
95173954d2b811ceb583a9012c3b16e1d0dd6438ek <span><strong class="command">dig</strong></span> normally sends recursive
95173954d2b811ceb583a9012c3b16e1d0dd6438ek queries. Recursion is automatically disabled when
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson the <em class="parameter"><code>+nssearch</code></em> or
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson <em class="parameter"><code>+trace</code></em> query options are used.
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson<dt><span class="term"><code class="option">+retry=T</code></span></dt>
dfbb943217bf8ab22a1a9d2e9dca01d4da95ee0bGeorge Wilson Sets the number of times to retry UDP queries to
95173954d2b811ceb583a9012c3b16e1d0dd6438ek server to <em class="parameter"><code>T</code></em> instead of the
fa9e4066f08beec538e775443c5be79dd423fcabahrens default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
99653d4ee642c6528e88224f12409a5f23060994eschrock this does not include the initial query.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Toggle the display of per-record comments in the
fa9e4066f08beec538e775443c5be79dd423fcabahrens output (for example, human-readable key information
fa9e4066f08beec538e775443c5be79dd423fcabahrens about DNSKEY records). The default is not to print
fa9e4066f08beec538e775443c5be79dd423fcabahrens record comments unless multiline mode is active.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]search</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Use [do not use] the search list defined by the
fa9e4066f08beec538e775443c5be79dd423fcabahrens searchlist or domain directive in
99653d4ee642c6528e88224f12409a5f23060994eschrock <code class="filename">resolv.conf</code> (if any). The search
fa9e4066f08beec538e775443c5be79dd423fcabahrens list is not used by default.
fa9e4066f08beec538e775443c5be79dd423fcabahrens 'ndots' from <code class="filename">resolv.conf</code> (default 1)
fa9e4066f08beec538e775443c5be79dd423fcabahrens which may be overridden by <em class="parameter"><code>+ndots</code></em>
fa9e4066f08beec538e775443c5be79dd423fcabahrens determines if the name will be treated as relative
fa9e4066f08beec538e775443c5be79dd423fcabahrens or not and hence whether a search is eventually
fa9e4066f08beec538e775443c5be79dd423fcabahrens performed or not.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]short</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Provide a terse answer. The default is to print the
fa9e4066f08beec538e775443c5be79dd423fcabahrens answer in a verbose form.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Perform [do not perform] a search showing intermediate
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Chase DNSSEC signature chains. Requires dig be
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson compiled with -DDIG_SIGCHASE.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+split=W</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Split long hex- or base64-formatted fields in resource
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson records into chunks of <em class="parameter"><code>W</code></em>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson characters (where <em class="parameter"><code>W</code></em> is rounded
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson up to the nearest multiple of 4).
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <em class="parameter"><code>+nosplit</code></em> or
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <em class="parameter"><code>+split=0</code></em> causes fields not to
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson be split at all. The default is 56 characters, or
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson 44 characters when multiline mode is active.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson This query option toggles the printing of statistics:
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson when the query was made, the size of the reply and
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson so on. The default behavior is to print the query
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Send an EDNS Client Subnet option with the specified
fa9e4066f08beec538e775443c5be79dd423fcabahrens IP address or network prefix.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Use [do not use] TCP when querying name servers. The
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson default behavior is to use UDP unless an
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <code class="literal">ixfr=N</code> query is requested, in which
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson case the default is TCP. AXFR queries always use
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+timeout=T</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Sets the timeout for a query to
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <em class="parameter"><code>T</code></em> seconds. The default
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson timeout is 5 seconds.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson An attempt to set <em class="parameter"><code>T</code></em> to less
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson than 1 will result
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson in a query timeout of 1 second being applied.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson When chasing DNSSEC signature chains perform a top-down
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson validation. Requires dig be compiled with -DDIG_SIGCHASE.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson Toggle tracing of the delegation path from the root
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson name servers for the name being looked up. Tracing
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson is disabled by default. When tracing is enabled,
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson <span><strong class="command">dig</strong></span> makes iterative queries to
078266a5aafa880521ea55488ef3d676f35e908eMarcel Telka resolve the name being looked up. It will follow
078266a5aafa880521ea55488ef3d676f35e908eMarcel Telka referrals from the root servers, showing the answer
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson from each server that was used to resolve the lookup.
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson If @server is also specified, it affects only the
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson initial query for the root zone name servers.
fa9e4066f08beec538e775443c5be79dd423fcabahrens <span><strong class="command">+dnssec</strong></span> is also set when +trace
fa9e4066f08beec538e775443c5be79dd423fcabahrens is set to better emulate the default queries from a
fa9e4066f08beec538e775443c5be79dd423fcabahrens nameserver.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+tries=T</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Sets the number of times to try UDP queries to server
fa9e4066f08beec538e775443c5be79dd423fcabahrens to <em class="parameter"><code>T</code></em> instead of the default,
99653d4ee642c6528e88224f12409a5f23060994eschrock 3. If <em class="parameter"><code>T</code></em> is less than or equal
99653d4ee642c6528e88224f12409a5f23060994eschrock to zero, the number of tries is silently rounded up
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Specifies a file containing trusted keys to be used
99653d4ee642c6528e88224f12409a5f23060994eschrock with <code class="option">+sigchase</code>. Each DNSKEY record
99653d4ee642c6528e88224f12409a5f23060994eschrock must be on its own line.
99653d4ee642c6528e88224f12409a5f23060994eschrock If not specified, <span><strong class="command">dig</strong></span> will look
fa9e4066f08beec538e775443c5be79dd423fcabahrens for <code class="filename">/etc/trusted-key.key</code> then
fa9e4066f08beec538e775443c5be79dd423fcabahrens <code class="filename">trusted-key.key</code> in the current
fa9e4066f08beec538e775443c5be79dd423fcabahrens Requires dig be compiled with -DDIG_SIGCHASE.
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Display [do not display] the TTL when printing the
99653d4ee642c6528e88224f12409a5f23060994eschrock<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
99653d4ee642c6528e88224f12409a5f23060994eschrock Display [do not display] the TTL in friendly human-readable
99653d4ee642c6528e88224f12409a5f23060994eschrock time units of "s", "m", "h", "d", and "w", representing
99653d4ee642c6528e88224f12409a5f23060994eschrock seconds, minutes, hours, days and weeks. Implies +ttlid.
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Use [do not use] TCP when querying name servers. This
99653d4ee642c6528e88224f12409a5f23060994eschrock alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
99653d4ee642c6528e88224f12409a5f23060994eschrock is provided for backwards compatibility. The "vc"
fa9e4066f08beec538e775443c5be79dd423fcabahrens stands for "virtual circuit".
fa9e4066f08beec538e775443c5be79dd423fcabahrens<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
fa9e4066f08beec538e775443c5be79dd423fcabahrens Set [do not set] the last unassigned DNS header flag in a
99653d4ee642c6528e88224f12409a5f23060994eschrock DNS query. This flag is off by default.
99653d4ee642c6528e88224f12409a5f23060994eschrock The BIND 9 implementation of <span><strong class="command">dig </strong></span>
99653d4ee642c6528e88224f12409a5f23060994eschrock specifying multiple queries on the command line (in addition to
fa9e4066f08beec538e775443c5be79dd423fcabahrens supporting the <code class="option">-f</code> batch file option). Each of those
fa9e4066f08beec538e775443c5be79dd423fcabahrens queries can be supplied with its own set of flags, options and query
3a57275a335306e90136ebd00a4689fe0ee72519ck In this case, each <em class="parameter"><code>query</code></em> argument
3a57275a335306e90136ebd00a4689fe0ee72519ck represent an
3a57275a335306e90136ebd00a4689fe0ee72519ck individual query in the command-line syntax described above. Each
3a57275a335306e90136ebd00a4689fe0ee72519ck consists of any of the standard options and flags, the name to be
fa9e4066f08beec538e775443c5be79dd423fcabahrens looked up, an optional query type and class and any query options that
fa9e4066f08beec538e775443c5be79dd423fcabahrens should be applied to that query.
fa9e4066f08beec538e775443c5be79dd423fcabahrens A global set of query options, which should be applied to all queries,
fa9e4066f08beec538e775443c5be79dd423fcabahrens can also be supplied. These global query options must precede the
fa9e4066f08beec538e775443c5be79dd423fcabahrens first tuple of name, class, type, options, flags, and query options
fa9e4066f08beec538e775443c5be79dd423fcabahrens supplied on the command line. Any global query options (except
fa9e4066f08beec538e775443c5be79dd423fcabahrens the <code class="option">+[no]cmd</code> option) can be
94de1d4cf6ec0a3bf040dcc4b8df107c4ed36b51eschrock overridden by a query-specific set of query options. For example:
0192a2782d86db43dfd071aa5d97f13a63c14951eschrockdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
fa9e4066f08beec538e775443c5be79dd423fcabahrens shows how <span><strong class="command">dig</strong></span> could be used from the
fa9e4066f08beec538e775443c5be79dd423fcabahrens command line
fa9e4066f08beec538e775443c5be79dd423fcabahrens to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson reverse lookup of 127.0.0.1 and a query for the NS records of
88ecc943b4eb72f7c4fbbd8435997b85ef171fc3George Wilson A global query option of <em class="parameter"><code>+qr</code></em> is
fa9e4066f08beec538e775443c5be79dd423fcabahrens that <span><strong class="command">dig</strong></span> shows the initial query it made
2f8aaab38e6371ad39ed90a1211ba8921acbb4d5eschrock lookup. The final query has a local query option of
fa9e4066f08beec538e775443c5be79dd423fcabahrens <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
99653d4ee642c6528e88224f12409a5f23060994eschrock will not print the initial query when it looks up the NS records for
99653d4ee642c6528e88224f12409a5f23060994eschrock If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
99653d4ee642c6528e88224f12409a5f23060994eschrock domain name) support, it can accept and display non-ASCII domain names.
99653d4ee642c6528e88224f12409a5f23060994eschrock <span><strong class="command">dig</strong></span> appropriately converts character encoding of
99653d4ee642c6528e88224f12409a5f23060994eschrock domain name before sending a request to DNS server or displaying a
99653d4ee642c6528e88224f12409a5f23060994eschrock reply from the server.
99653d4ee642c6528e88224f12409a5f23060994eschrock If you'd like to turn off the IDN support for some reason, defines
99653d4ee642c6528e88224f12409a5f23060994eschrock the <code class="envar">IDN_DISABLE</code> environment variable.
fa94a07fd0519b8abfd871ad8fe60e6bebe1e2bbbrendan The IDN support is disabled if the variable is set when
fa94a07fd0519b8abfd871ad8fe60e6bebe1e2bbbrendan <span><strong class="command">dig</strong></span> runs.
95173954d2b811ceb583a9012c3b16e1d0dd6438ek<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
95173954d2b811ceb583a9012c3b16e1d0dd6438ek <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
95173954d2b811ceb583a9012c3b16e1d0dd6438ek <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
95173954d2b811ceb583a9012c3b16e1d0dd6438ek There are probably too many query options.
99653d4ee642c6528e88224f12409a5f23060994eschrock<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
99653d4ee642c6528e88224f12409a5f23060994eschrock<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
fa9e4066f08beec538e775443c5be79dd423fcabahrens<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
fa9e4066f08beec538e775443c5be79dd423fcabahrens<td width="40%" align="left" valign="top">Manual pages�</td>
fa9e4066f08beec538e775443c5be79dd423fcabahrens<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>