man.dig.html revision 0e1dece22e128f9dfa723316a35c4b3f06912381
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews<!--
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
816e576f77e2c46df3e3d97d65822aa8aded7c4bDavid Lawrence - Copyright (C) 2000-2003 Internet Software Consortium.
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson -
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein - Permission to use, copy, modify, and/or distribute this software for any
9c3531d72aeaad6c5f01efe6a1c82023e1379e4dDavid Lawrence - purpose with or without fee is hereby granted, provided that the above
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson - copyright notice and this permission notice appear in all copies.
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson -
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson - PERFORMANCE OF THIS SOFTWARE.
361a4334ec8ef9d678dcd6c94f96547efedb02bdAndreas Gustafsson-->
361a4334ec8ef9d678dcd6c94f96547efedb02bdAndreas Gustafsson<!-- $Id$ -->
361a4334ec8ef9d678dcd6c94f96547efedb02bdAndreas Gustafsson<html>
76458ec215a57c6806afdd831b9c9a30b93344b0Andreas Gustafsson<head>
aff4e48c82c1de198a627fe7a57fb6f400d6d3c1Andreas Gustafsson<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
aff4e48c82c1de198a627fe7a57fb6f400d6d3c1Andreas Gustafsson<title>dig</title>
76458ec215a57c6806afdd831b9c9a30b93344b0Andreas Gustafsson<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
b3651a8e87c12ea0428eeb5cf4b304be5bcd9db0Brian Wellington<link rel="next" href="man.host.html" title="host">
65dfcdc392b93f9d67684adce8b33a1d8168e67cAndreas Gustafsson</head>
65dfcdc392b93f9d67684adce8b33a1d8168e67cAndreas Gustafsson<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
65dfcdc392b93f9d67684adce8b33a1d8168e67cAndreas Gustafsson<div class="navheader">
65dfcdc392b93f9d67684adce8b33a1d8168e67cAndreas Gustafsson<table width="100%" summary="Navigation header">
65dfcdc392b93f9d67684adce8b33a1d8168e67cAndreas Gustafsson<tr><th colspan="3" align="center">dig</th></tr>
bfe7da9c6b20573c2da09ad2e7cac0a54c8cd47bMark Andrews<tr>
65dfcdc392b93f9d67684adce8b33a1d8168e67cAndreas Gustafsson<td width="20%" align="left">
65dfcdc392b93f9d67684adce8b33a1d8168e67cAndreas Gustafsson<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
c5b14e2676e8832de77bf63b8f58890d13a6c1e2Andreas Gustafsson<th width="60%" align="center">Manual pages</th>
65dfcdc392b93f9d67684adce8b33a1d8168e67cAndreas Gustafsson<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
f11c81f4fe26ae9f1ef990257b3b2cac6ab5be12Mark Andrews</td>
f11c81f4fe26ae9f1ef990257b3b2cac6ab5be12Mark Andrews</tr>
f11c81f4fe26ae9f1ef990257b3b2cac6ab5be12Mark Andrews</table>
f11c81f4fe26ae9f1ef990257b3b2cac6ab5be12Mark Andrews<hr>
0e873a120279dbae16ec3773d7c67d473602b7c6Andreas Gustafsson</div>
0e873a120279dbae16ec3773d7c67d473602b7c6Andreas Gustafsson<div class="refentry" lang="en">
0e873a120279dbae16ec3773d7c67d473602b7c6Andreas Gustafsson<a name="man.dig"></a><div class="titlepage"></div>
0e873a120279dbae16ec3773d7c67d473602b7c6Andreas Gustafsson<div class="refnamediv">
0e873a120279dbae16ec3773d7c67d473602b7c6Andreas Gustafsson<h2>Name</h2>
76458ec215a57c6806afdd831b9c9a30b93344b0Andreas Gustafsson<p>dig &#8212; DNS lookup utility</p>
72e278abc7c73059de68017eceae7d5138ee98c1Andreas Gustafsson</div>
72e278abc7c73059de68017eceae7d5138ee98c1Andreas Gustafsson<div class="refsynopsisdiv">
76458ec215a57c6806afdd831b9c9a30b93344b0Andreas Gustafsson<h2>Synopsis</h2>
c5b14e2676e8832de77bf63b8f58890d13a6c1e2Andreas Gustafsson<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
d075bd326e34600c036c905eea6c80f565ea951fAndreas Gustafsson<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
d075bd326e34600c036c905eea6c80f565ea951fAndreas Gustafsson<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
361a4334ec8ef9d678dcd6c94f96547efedb02bdAndreas Gustafsson</div>
7f800a6b10b0172e36e6fef855f48109717b6a2cAndreas Gustafsson<div class="refsect1" lang="en">
7f800a6b10b0172e36e6fef855f48109717b6a2cAndreas Gustafsson<a name="id2613139"></a><h2>DESCRIPTION</h2>
b976f9c60a09f4a098852d0653ad5df6842557a7Andreas Gustafsson<p><span><strong class="command">dig</strong></span>
a1bb4b0e4f71fb2878050905087d279cfa87b786Andreas Gustafsson (domain information groper) is a flexible tool
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson for interrogating DNS name servers. It performs DNS lookups and
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson displays the answers that are returned from the name server(s) that
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson troubleshoot DNS problems because of its flexibility, ease of use and
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson clarity of output. Other lookup tools tend to have less functionality
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson than <span><strong class="command">dig</strong></span>.
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson </p>
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson<p>
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson Although <span><strong class="command">dig</strong></span> is normally used with
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson command-line
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson arguments, it also has a batch mode of operation for reading lookup
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson requests from a file. A brief summary of its command-line arguments
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson and options is printed when the <code class="option">-h</code> option is given.
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson Unlike earlier versions, the BIND 9 implementation of
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson from the
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson command line.
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson </p>
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson<p>
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson Unless it is told to query a specific name server,
63404af69b0b99b8fa551e92702921f01c3bbfd7Andreas Gustafsson <span><strong class="command">dig</strong></span> will try each of the servers listed in
6af37648dd5e0cb407cbef1fed5255dd874e61efAndreas Gustafsson <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
6af37648dd5e0cb407cbef1fed5255dd874e61efAndreas Gustafsson are found, <span><strong class="command">dig</strong></span> will send the query to the local
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson host.
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson </p>
3d4a70fe38769e42b943717256208b63fec05f32Andreas Gustafsson<p>
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson When no command line arguments or options are given,
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
3d4a70fe38769e42b943717256208b63fec05f32Andreas Gustafsson </p>
3d4a70fe38769e42b943717256208b63fec05f32Andreas Gustafsson<p>
3d4a70fe38769e42b943717256208b63fec05f32Andreas Gustafsson It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
3d4a70fe38769e42b943717256208b63fec05f32Andreas Gustafsson <code class="filename">${HOME}/.digrc</code>. This file is read and
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson any options in it
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson are applied before the command line arguments.
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson </p>
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson<p>
6f6fbed6eb4d755198a452e557eead49f215d54bAndreas Gustafsson The IN and CH class names overlap with the IN and CH top level
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson domain names. Either use the <code class="option">-t</code> and
6af37648dd5e0cb407cbef1fed5255dd874e61efAndreas Gustafsson <code class="option">-c</code> options to specify the type and class,
6af37648dd5e0cb407cbef1fed5255dd874e61efAndreas Gustafsson use the <code class="option">-q</code> the specify the domain name, or
6af37648dd5e0cb407cbef1fed5255dd874e61efAndreas Gustafsson use "IN." and "CH." when looking up these top level domains.
6af37648dd5e0cb407cbef1fed5255dd874e61efAndreas Gustafsson </p>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence</div>
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson<div class="refsect1" lang="en">
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence<a name="id2613241"></a><h2>SIMPLE USAGE</h2>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence<p>
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson A typical invocation of <span><strong class="command">dig</strong></span> looks like:
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson </p>
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson<pre class="programlisting"> dig @server name type </pre>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence<p>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence where:
021a3183ec1db24e2b9627bdd059a121c56ab886Andreas Gustafsson
021a3183ec1db24e2b9627bdd059a121c56ab886Andreas Gustafsson </p>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence<div class="variablelist"><dl>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein<dt><span class="term"><code class="constant">server</code></span></dt>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein<dd>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein<p>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein is the name or IP address of the name server to query. This
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein can be an IPv4 address in dotted-decimal notation or an IPv6
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein address in colon-delimited notation. When the supplied
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein <em class="parameter"><code>server</code></em> argument is a hostname,
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein <span><strong class="command">dig</strong></span> resolves that name before querying
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence that name server.
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence </p>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence<p>
1ae59f0202d4dd5f41f978804b092115c6e053eaDavid Lawrence If no <em class="parameter"><code>server</code></em> argument is
1ae59f0202d4dd5f41f978804b092115c6e053eaDavid Lawrence provided, <span><strong class="command">dig</strong></span> consults
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence <code class="filename">/etc/resolv.conf</code>; if an
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein address is found there, it queries the name server at
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein that address. If either of the <code class="option">-4</code> or
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein <code class="option">-6</code> options are in use, then
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein only addresses for the corresponding transport
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein will be tried. If no usable addresses are found,
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein <span><strong class="command">dig</strong></span> will send the query to the
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein local host. The reply from the name server that
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews responds is displayed.
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein </p>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence</dd>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence<dt><span class="term"><code class="constant">name</code></span></dt>
f11c81f4fe26ae9f1ef990257b3b2cac6ab5be12Mark Andrews<dd><p>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein is the name of the resource record that is to be looked up.
f11c81f4fe26ae9f1ef990257b3b2cac6ab5be12Mark Andrews </p></dd>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein<dt><span class="term"><code class="constant">type</code></span></dt>
f11c81f4fe26ae9f1ef990257b3b2cac6ab5be12Mark Andrews<dd><p>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence indicates what type of query is required &#8212;
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence ANY, A, MX, SIG, etc.
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein <em class="parameter"><code>type</code></em> can be any valid query
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein type. If no
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence <em class="parameter"><code>type</code></em> argument is supplied,
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence <span><strong class="command">dig</strong></span> will perform a lookup for an
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence A record.
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence </p></dd>
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews</dl></div>
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews<p>
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews </p>
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews</div>
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews<div class="refsect1" lang="en">
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews<a name="id2613367"></a><h2>OPTIONS</h2>
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews<p>
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence The <code class="option">-b</code> option sets the source IP address of the query
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence to <em class="parameter"><code>address</code></em>. This must be a valid
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence address on
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence one of the host's network interfaces or "0.0.0.0" or "::". An optional
1ae59f0202d4dd5f41f978804b092115c6e053eaDavid Lawrence port
1ae59f0202d4dd5f41f978804b092115c6e053eaDavid Lawrence may be specified by appending "#&lt;port&gt;"
1e730144b4cbb0767510f5f6adef6666bf861bbbMark Andrews </p>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein<p>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein The default query class (IN for internet) is overridden by the
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein any valid
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein class, such as HS for Hesiod records or CH for Chaosnet records.
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein </p>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein<p>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein operate
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein in batch mode by reading a list of lookup requests to process from the
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein file <em class="parameter"><code>filename</code></em>. The file contains a
818bb50f16abdb79ada224cd910d500d5fd71278Rob Austein number of
04bdb234571448ed6194e1d4048e6512f2446f1cDavid Lawrence queries, one per line. Each entry in the file should be organized in
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson the same way they would be presented as queries to
76458ec215a57c6806afdd831b9c9a30b93344b0Andreas Gustafsson <span><strong class="command">dig</strong></span> using the command-line interface.
f5eb48652c7ec98514256b5b6e6fd7cbc22b1916Andreas Gustafsson </p>
76458ec215a57c6806afdd831b9c9a30b93344b0Andreas Gustafsson<p>
021a3183ec1db24e2b9627bdd059a121c56ab886Andreas Gustafsson The <code class="option">-m</code> option enables memory usage debugging.
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson </p>
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson<p>
6f6fbed6eb4d755198a452e557eead49f215d54bAndreas Gustafsson If a non-standard port number is to be queried, the
6f6fbed6eb4d755198a452e557eead49f215d54bAndreas Gustafsson <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson the port number that <span><strong class="command">dig</strong></span> will send its
20df5357b17d31a3adc4d6f7cfdd9d4f1c5addf2Andreas Gustafsson queries
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson instead of the standard DNS port number 53. This option would be used
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson to test a name server that has been configured to listen for queries
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson on a non-standard port number.
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson </p>
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson<p>
c5b14e2676e8832de77bf63b8f58890d13a6c1e2Andreas Gustafsson The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
021a3183ec1db24e2b9627bdd059a121c56ab886Andreas Gustafsson to only
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson use IPv4 query transport. The <code class="option">-6</code> option forces
d5a0b9c15c0a81a982fd7375a195f368c30a47b9Andreas Gustafsson <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
d5a0b9c15c0a81a982fd7375a195f368c30a47b9Andreas Gustafsson </p>
d5a0b9c15c0a81a982fd7375a195f368c30a47b9Andreas Gustafsson<p>
d5a0b9c15c0a81a982fd7375a195f368c30a47b9Andreas Gustafsson The <code class="option">-t</code> option sets the query type to
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <em class="parameter"><code>type</code></em>. It can be any valid query type
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson which is
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson supported in BIND 9. The default query type is "A", unless the
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <code class="option">-x</code> option is supplied to indicate a reverse lookup.
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson A zone transfer can be requested by specifying a type of AXFR. When
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson an incremental zone transfer (IXFR) is required,
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson The incremental zone transfer will contain the changes made to the zone
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson since the serial number in the zone's SOA record was
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <em class="parameter"><code>N</code></em>.
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson </p>
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson<p>
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson The <code class="option">-q</code> option sets the query name to
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <em class="parameter"><code>name</code></em>. This is useful to distinguish the
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <em class="parameter"><code>name</code></em> from other arguments.
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson </p>
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson<p>
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson Reverse lookups &#8212; mapping addresses to names &#8212; are simplified by the
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson an IPv4
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson address in dotted-decimal notation, or a colon-delimited IPv6 address.
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson When this option is used, there is no need to provide the
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson automatically performs a lookup for a name like
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson query type and
d5a0b9c15c0a81a982fd7375a195f368c30a47b9Andreas Gustafsson class to PTR and IN respectively. By default, IPv6 addresses are
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson looked up using nibble format under the IP6.ARPA domain.
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson To use the older RFC1886 method using the IP6.INT domain
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson are now experimental and are not attempted.
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson </p>
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson<p>
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson their
b1e7bb6aef7f9c559a2b42d8fcc82001d8c83b21Andreas Gustafsson responses using transaction signatures (TSIG), specify a TSIG key file
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson using the <code class="option">-k</code> option. You can also specify the TSIG
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson key itself on the command line using the <code class="option">-y</code> option;
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
f7aa8ce0b3cf7f5df618a42beecf8d5517c000acAndreas Gustafsson <em class="parameter"><code>name</code></em> is the name of the TSIG key and
c7d445ce7f4db5262ba3412eac7b1ee9d053b93dAndreas Gustafsson <em class="parameter"><code>key</code></em> is the actual key. The key is a
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson base-64
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson encoded string, typically generated by
2357f291c53de433c39ce844d2f0abc0bccfa9fcAndreas Gustafsson <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson Caution should be taken when using the <code class="option">-y</code> option on
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson multi-user systems as the key can be visible in the output from
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson or in the shell's history file. When
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson server that is queried needs to know the key and algorithm that is
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson being used. In BIND, this is done by providing appropriate
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson <code class="filename">named.conf</code>.
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson </p>
b976f9c60a09f4a098852d0653ad5df6842557a7Andreas Gustafsson</div>
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson<div class="refsect1" lang="en">
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson<a name="id2666002"></a><h2>QUERY OPTIONS</h2>
20df5357b17d31a3adc4d6f7cfdd9d4f1c5addf2Andreas Gustafsson<p><span><strong class="command">dig</strong></span>
20df5357b17d31a3adc4d6f7cfdd9d4f1c5addf2Andreas Gustafsson provides a number of query options which affect
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson the way in which lookups are made and the results displayed. Some of
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson these set or reset flag bits in the query header, some determine which
c33679b400a69afeeb719addc390a3134f61ecfcAndreas Gustafsson sections of the answer get printed, and others determine the timeout
c33679b400a69afeeb719addc390a3134f61ecfcAndreas Gustafsson and retry strategies.
c33679b400a69afeeb719addc390a3134f61ecfcAndreas Gustafsson </p>
c33679b400a69afeeb719addc390a3134f61ecfcAndreas Gustafsson<p>
c33679b400a69afeeb719addc390a3134f61ecfcAndreas Gustafsson Each query option is identified by a keyword preceded by a plus sign
7736b3327ede0998c44c925b8301de7d61b0f4abAndreas Gustafsson (<code class="literal">+</code>). Some keywords set or reset an
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson option. These may be preceded
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson by the string <code class="literal">no</code> to negate the meaning of
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson that keyword. Other
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson keywords assign values to options like the timeout interval. They
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson have the form <code class="option">+keyword=value</code>.
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson The query options are:
fdf2eaf21bf4530114049f3c77421a56d585aabcAndreas Gustafsson
76458ec215a57c6806afdd831b9c9a30b93344b0Andreas Gustafsson </p>
2d54cf04fc02db7c369592b6f91bbd1330df3387Andreas Gustafsson<div class="variablelist"><dl>
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
36bc6a0a8312de762caf1e984efe15c8e7170d9dAndreas Gustafsson<dd><p>
Use [do not use] TCP when querying name servers. The default
behavior is to use UDP unless an AXFR or IXFR query is
requested, in
which case a TCP connection is used.
</p></dd>
<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
<dd><p>
Use [do not use] TCP when querying name servers. This alternate
syntax to <em class="parameter"><code>+[no]tcp</code></em> is
provided for backwards
compatibility. The "vc" stands for "virtual circuit".
</p></dd>
<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
<dd><p>
Ignore truncation in UDP responses instead of retrying with TCP.
By
default, TCP retries are performed.
</p></dd>
<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
<dd><p>
Set the search list to contain the single domain
<em class="parameter"><code>somename</code></em>, as if specified in
a
<span><strong class="command">domain</strong></span> directive in
<code class="filename">/etc/resolv.conf</code>, and enable
search list
processing as if the <em class="parameter"><code>+search</code></em>
option were given.
</p></dd>
<dt><span class="term"><code class="option">+[no]search</code></span></dt>
<dd><p>
Use [do not use] the search list defined by the searchlist or
domain
directive in <code class="filename">resolv.conf</code> (if
any).
The search list is not used by default.
</p></dd>
<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
<dd><p>
Perform [do not perform] a search showing intermediate
results.
</p></dd>
<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
<dd><p>
Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
</p></dd>
<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
<dd><p>
Sets the "aa" flag in the query.
</p></dd>
<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
<dd><p>
A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
</p></dd>
<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
<dd><p>
Set [do not set] the AD (authentic data) bit in the
query. This requests the server to return whether
all of the answer and authority sections have all
been validated as secure according to the security
policy of the server. AD=1 indicates that all records
have been validated as secure and the answer is not
from a OPT-OUT range. AD=0 indicate that some part
of the answer was insecure or not validated. This
bit is set by default.
</p></dd>
<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
<dd><p>
Set [do not set] the CD (checking disabled) bit in the query.
This
requests the server to not perform DNSSEC validation of
responses.
</p></dd>
<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
<dd><p>
Display [do not display] the CLASS when printing the record.
</p></dd>
<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
<dd><p>
Display [do not display] the TTL when printing the record.
</p></dd>
<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
<dd><p>
Toggle the setting of the RD (recursion desired) bit
in the query. This bit is set by default, which means
<span><strong class="command">dig</strong></span> normally sends recursive
queries. Recursion is automatically disabled when
the <em class="parameter"><code>+nssearch</code></em> or
<em class="parameter"><code>+trace</code></em> query options are used.
</p></dd>
<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
<dd><p>
When this option is set, <span><strong class="command">dig</strong></span>
attempts to find the
authoritative name servers for the zone containing the name
being
looked up and display the SOA record that each name server has
for the
zone.
</p></dd>
<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
<dd>
<p>
Toggle tracing of the delegation path from the root
name servers for the name being looked up. Tracing
is disabled by default. When tracing is enabled,
<span><strong class="command">dig</strong></span> makes iterative queries to
resolve the name being looked up. It will follow
referrals from the root servers, showing the answer
from each server that was used to resolve the lookup.
</p>
<p>
<span><strong class="command">+dnssec</strong></span> is also set when +trace is
set to better emulate the default queries from a nameserver.
</p>
</dd>
<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
<dd><p>
Toggles the printing of the initial comment in the output
identifying
the version of <span><strong class="command">dig</strong></span> and the query
options that have
been applied. This comment is printed by default.
</p></dd>
<dt><span class="term"><code class="option">+[no]short</code></span></dt>
<dd><p>
Provide a terse answer. The default is to print the answer in a
verbose form.
</p></dd>
<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
<dd><p>
Show [or do not show] the IP address and port number that
supplied the
answer when the <em class="parameter"><code>+short</code></em> option
is enabled. If
short form answers are requested, the default is not to show the
source address and port number of the server that provided the
answer.
</p></dd>
<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
<dd><p>
Toggle the display of comment lines in the output. The default
is to print comments.
</p></dd>
<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
<dd><p>
Toggle the display of per-record comments in the output (for
example, human-readable key information about DNSKEY records).
The default is not to print record comments unless multiline
mode is active.
</p></dd>
<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
<dd><p>
Toggle the display of cryptographic fields in DNSSEC records.
The contents of these field are unnecessary to debug most DNSSEC
validation failures and removing them makes it easier to see
the common failures. The default is to display the fields.
When omitted they are replaced by the string "[omitted]" or
in the DNSKEY case the key id is displayed as the replacement,
e.g. "[ key id = value ]".
</p></dd>
<dt><span class="term"><code class="option">+split=W</code></span></dt>
<dd><p>
Split long hex- or base64-formatted fields in resource
records into chunks of <em class="parameter"><code>W</code></em> characters
(where <em class="parameter"><code>W</code></em> is rounded up to the nearest
multiple of 4).
<em class="parameter"><code>+nosplit</code></em> or
<em class="parameter"><code>+split=0</code></em> causes fields not to be
split at all. The default is 56 characters, or 44 characters
when multiline mode is active.
</p></dd>
<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
<dd><p>
This query option toggles the printing of statistics: when the
query
was made, the size of the reply and so on. The default
behavior is
to print the query statistics.
</p></dd>
<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
<dd><p>
Print [do not print] the query as it is sent.
By default, the query is not printed.
</p></dd>
<dt><span class="term"><code class="option">+[no]question</code></span></dt>
<dd><p>
Print [do not print] the question section of a query when an
answer is
returned. The default is to print the question section as a
comment.
</p></dd>
<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
<dd><p>
Display [do not display] the answer section of a reply. The
default
is to display it.
</p></dd>
<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
<dd><p>
Display [do not display] the authority section of a reply. The
default is to display it.
</p></dd>
<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
<dd><p>
Display [do not display] the additional section of a reply.
The default is to display it.
</p></dd>
<dt><span class="term"><code class="option">+[no]all</code></span></dt>
<dd><p>
Set or clear all display flags.
</p></dd>
<dt><span class="term"><code class="option">+time=T</code></span></dt>
<dd><p>
Sets the timeout for a query to
<em class="parameter"><code>T</code></em> seconds. The default
timeout is 5 seconds.
An attempt to set <em class="parameter"><code>T</code></em> to less
than 1 will result
in a query timeout of 1 second being applied.
</p></dd>
<dt><span class="term"><code class="option">+tries=T</code></span></dt>
<dd><p>
Sets the number of times to try UDP queries to server to
<em class="parameter"><code>T</code></em> instead of the default, 3.
If
<em class="parameter"><code>T</code></em> is less than or equal to
zero, the number of
tries is silently rounded up to 1.
</p></dd>
<dt><span class="term"><code class="option">+retry=T</code></span></dt>
<dd><p>
Sets the number of times to retry UDP queries to server to
<em class="parameter"><code>T</code></em> instead of the default, 2.
Unlike
<em class="parameter"><code>+tries</code></em>, this does not include
the initial
query.
</p></dd>
<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
<dd><p>
Set the number of dots that have to appear in
<em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
considered absolute. The default value is that defined using
the
ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
ndots statement is present. Names with fewer dots are
interpreted as
relative names and will be searched for in the domains listed in
the
<code class="option">search</code> or <code class="option">domain</code> directive in
<code class="filename">/etc/resolv.conf</code>.
</p></dd>
<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
<dd><p>
Set the UDP message buffer size advertised using EDNS0 to
<em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
of this buffer are 65535 and 0 respectively. Values outside
this range are rounded up or down appropriately.
Values other than zero will cause a EDNS query to be sent.
</p></dd>
<dt><span class="term"><code class="option">+edns=#</code></span></dt>
<dd><p>
Specify the EDNS version to query with. Valid values
are 0 to 255. Setting the EDNS version will cause
a EDNS query to be sent. <code class="option">+noedns</code>
clears the remembered EDNS version. EDNS is set to
0 by default.
</p></dd>
<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
<dd><p>
Print records like the SOA records in a verbose multi-line
format with human-readable comments. The default is to print
each record on a single line, to facilitate machine parsing
of the <span><strong class="command">dig</strong></span> output.
</p></dd>
<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
<dd><p>
Print only one (starting) SOA record when performing
an AXFR. The default is to print both the starting and
ending SOA records.
</p></dd>
<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
<dd><p>
Do not try the next server if you receive a SERVFAIL. The
default is
to not try the next server which is the reverse of normal stub
resolver
behavior.
</p></dd>
<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
<dd><p>
Attempt to display the contents of messages which are malformed.
The default is to not display malformed answers.
</p></dd>
<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
<dd><p>
Requests DNSSEC records be sent by setting the DNSSEC OK bit
(DO)
in the OPT record in the additional section of the query.
</p></dd>
<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
<dd><p>
Chase DNSSEC signature chains. Requires dig be compiled with
-DDIG_SIGCHASE.
</p></dd>
<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
<dd>
<p>
Specifies a file containing trusted keys to be used with
<code class="option">+sigchase</code>. Each DNSKEY record must be
on its own line.
</p>
<p>
If not specified, <span><strong class="command">dig</strong></span> will look for
<code class="filename">/etc/trusted-key.key</code> then
<code class="filename">trusted-key.key</code> in the current directory.
</p>
<p>
Requires dig be compiled with -DDIG_SIGCHASE.
</p>
</dd>
<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
<dd><p>
When chasing DNSSEC signature chains perform a top-down
validation.
Requires dig be compiled with -DDIG_SIGCHASE.
</p></dd>
<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
<dd><p>
Include an EDNS name server ID request when sending a query.
</p></dd>
<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
<dd><p>
Keep the TCP socket open between queries and reuse it rather
than creating a new TCP socket for each lookup. The default
is <code class="option">+nokeepopen</code>.
</p></dd>
<dt><span class="term"><code class="option">+[no]sit[<span class="optional">=####</span>]</code></span></dt>
<dd><p>
Send a Source Identity Token EDNS option, with optional value.
Replaying a SIT from a previous response will allow the
server to identify a previous client. The default is
<code class="option">+nosit</code>. Currently using experimental value
65001 for the option code.
</p></dd>
<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
<dd><p>
Send an EDNS Client Subnet option with the speciifed
IP address or network prefix.
</p></dd>
<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
<dd><p>
Send an EDNS Expire option. Currently using experimental
value 65002 for the option code.
</p></dd>
</dl></div>
<p>
</p>
</div>
<div class="refsect1" lang="en">
<a name="id2667219"></a><h2>MULTIPLE QUERIES</h2>
<p>
The BIND 9 implementation of <span><strong class="command">dig </strong></span>
supports
specifying multiple queries on the command line (in addition to
supporting the <code class="option">-f</code> batch file option). Each of those
queries can be supplied with its own set of flags, options and query
options.
</p>
<p>
In this case, each <em class="parameter"><code>query</code></em> argument
represent an
individual query in the command-line syntax described above. Each
consists of any of the standard options and flags, the name to be
looked up, an optional query type and class and any query options that
should be applied to that query.
</p>
<p>
A global set of query options, which should be applied to all queries,
can also be supplied. These global query options must precede the
first tuple of name, class, type, options, flags, and query options
supplied on the command line. Any global query options (except
the <code class="option">+[no]cmd</code> option) can be
overridden by a query-specific set of query options. For example:
</p>
<pre class="programlisting">
dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
</pre>
<p>
shows how <span><strong class="command">dig</strong></span> could be used from the
command line
to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
reverse lookup of 127.0.0.1 and a query for the NS records of
<code class="literal">isc.org</code>.
A global query option of <em class="parameter"><code>+qr</code></em> is
applied, so
that <span><strong class="command">dig</strong></span> shows the initial query it made
for each
lookup. The final query has a local query option of
<em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
will not print the initial query when it looks up the NS records for
<code class="literal">isc.org</code>.
</p>
</div>
<div class="refsect1" lang="en">
<a name="id2667304"></a><h2>IDN SUPPORT</h2>
<p>
If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
domain name) support, it can accept and display non-ASCII domain names.
<span><strong class="command">dig</strong></span> appropriately converts character encoding of
domain name before sending a request to DNS server or displaying a
reply from the server.
If you'd like to turn off the IDN support for some reason, defines
the <code class="envar">IDN_DISABLE</code> environment variable.
The IDN support is disabled if the variable is set when
<span><strong class="command">dig</strong></span> runs.
</p>
</div>
<div class="refsect1" lang="en">
<a name="id2667333"></a><h2>FILES</h2>
<p><code class="filename">/etc/resolv.conf</code>
</p>
<p><code class="filename">${HOME}/.digrc</code>
</p>
</div>
<div class="refsect1" lang="en">
<a name="id2667354"></a><h2>SEE ALSO</h2>
<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
<span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
<span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
<em class="citetitle">RFC1035</em>.
</p>
</div>
<div class="refsect1" lang="en">
<a name="id2667392"></a><h2>BUGS</h2>
<p>
There are probably too many query options.
</p>
</div>
</div>
<div class="navfooter">
<hr>
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
</td>
</tr>
<tr>
<td width="40%" align="left" valign="top">Manual pages�</td>
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top">�host</td>
</tr>
</table>
</div>
</body>
</html>