man.dig.html revision 12351e0500dff39f56844401fd191a36bcc4a7ad
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC")
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - Permission to use, copy, modify, and distribute this software for any
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - purpose with or without fee is hereby granted, provided that the above
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - copyright notice and this permission notice appear in all copies.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync - PERFORMANCE OF THIS SOFTWARE.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<!-- $Id: man.dig.html,v 1.50 2007/05/30 02:30:15 marka Exp $ -->
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<p><span><strong class="command">dig</strong></span>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync (domain information groper) is a flexible tool
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync for interrogating DNS name servers. It performs DNS lookups and
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync displays the answers that are returned from the name server(s) that
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync troubleshoot DNS problems because of its flexibility, ease of use and
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync clarity of output. Other lookup tools tend to have less functionality
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync than <span><strong class="command">dig</strong></span>.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Although <span><strong class="command">dig</strong></span> is normally used with
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync command-line
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync arguments, it also has a batch mode of operation for reading lookup
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync requests from a file. A brief summary of its command-line arguments
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync and options is printed when the <code class="option">-h</code> option is given.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Unlike earlier versions, the BIND 9 implementation of
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync command line.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Unless it is told to query a specific name server,
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">dig</strong></span> will try each of the servers listed
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync When no command line arguments or options are given, will perform an
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync NS query for "." (the root).
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <code class="filename">${HOME}/.digrc</code>. This file is read and
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync any options in it
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync are applied before the command line arguments.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The IN and CH class names overlap with the IN and CH top level
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync domains names. Either use the <code class="option">-t</code> and
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <code class="option">-c</code> options to specify the type and class or
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync use the <code class="option">-q</code> the specify the domain name or
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync use "IN." and "CH." when looking up these top level domains.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync A typical invocation of <span><strong class="command">dig</strong></span> looks like:
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<pre class="programlisting"> dig @server name type </pre>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="constant">server</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync is the name or IP address of the name server to query. This can
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync address in dotted-decimal notation or an IPv6
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync address in colon-delimited notation. When the supplied
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>server</code></em> argument is a
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">dig</strong></span> resolves that name before
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync querying that name
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync server. If no <em class="parameter"><code>server</code></em>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync argument is provided,
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync and queries the name servers listed there. The reply from the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync server that responds is displayed.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="constant">name</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync is the name of the resource record that is to be looked up.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="constant">type</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync indicates what type of query is required —
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync ANY, A, MX, SIG, etc.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>type</code></em> can be any valid query
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync type. If no
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>type</code></em> argument is supplied,
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">dig</strong></span> will perform a lookup for an
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The <code class="option">-b</code> option sets the source IP address of the query
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync to <em class="parameter"><code>address</code></em>. This must be a valid
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync one of the host's network interfaces or "0.0.0.0" or "::". An optional
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync may be specified by appending "#<port>"
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The default query class (IN for internet) is overridden by the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync class, such as HS for Hesiod records or CH for Chaosnet records.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync in batch mode by reading a list of lookup requests to process from the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync file <em class="parameter"><code>filename</code></em>. The file contains a
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync queries, one per line. Each entry in the file should be organized in
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync the same way they would be presented as queries to
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">dig</strong></span> using the command-line interface.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync If a non-standard port number is to be queried, the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync the port number that <span><strong class="command">dig</strong></span> will send its
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync instead of the standard DNS port number 53. This option would be used
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync to test a name server that has been configured to listen for queries
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync on a non-standard port number.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync use IPv4 query transport. The <code class="option">-6</code> option forces
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The <code class="option">-t</code> option sets the query type to
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>type</code></em>. It can be any valid query type
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync supported in BIND 9. The default query type is "A", unless the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <code class="option">-x</code> option is supplied to indicate a reverse lookup.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync A zone transfer can be requested by specifying a type of AXFR. When
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync an incremental zone transfer (IXFR) is required,
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The incremental zone transfer will contain the changes made to the zone
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync since the serial number in the zone's SOA record was
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The <code class="option">-q</code> option sets the query name to
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>name</code></em>. This useful do distinguish the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>name</code></em> from other arguments.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Reverse lookups — mapping addresses to names — are simplified by the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync address in dotted-decimal notation, or a colon-delimited IPv6 address.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync When this option is used, there is no need to provide the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync automatically performs a lookup for a name like
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync query type and
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync class to PTR and IN respectively. By default, IPv6 addresses are
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync looked up using nibble format under the IP6.ARPA domain.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync To use the older RFC1886 method using the IP6.INT domain
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync are now experimental and are not attempted.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync responses using transaction signatures (TSIG), specify a TSIG key file
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync using the <code class="option">-k</code> option. You can also specify the TSIG
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync key itself on the command line using the <code class="option">-y</code> option;
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>name</code></em> is the name of the TSIG key and
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>key</code></em> is the actual key. The key is a
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync encoded string, typically generated by
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Caution should be taken when using the <code class="option">-y</code> option on
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync multi-user systems as the key can be visible in the output from
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync or in the shell's history file. When
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync server that is queried needs to know the key and algorithm that is
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync being used. In BIND, this is done by providing appropriate
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<p><span><strong class="command">dig</strong></span>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync provides a number of query options which affect
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync the way in which lookups are made and the results displayed. Some of
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync these set or reset flag bits in the query header, some determine which
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync sections of the answer get printed, and others determine the timeout
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync and retry strategies.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Each query option is identified by a keyword preceded by a plus sign
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync (<code class="literal">+</code>). Some keywords set or reset an
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync option. These may be preceded
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync by the string <code class="literal">no</code> to negate the meaning of
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync that keyword. Other
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync keywords assign values to options like the timeout interval. They
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync have the form <code class="option">+keyword=value</code>.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The query options are:
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Use [do not use] TCP when querying name servers. The default
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync behavior is to use UDP unless an AXFR or IXFR query is
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync requested, in
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync which case a TCP connection is used.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Use [do not use] TCP when querying name servers. This alternate
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync syntax to <em class="parameter"><code>+[no]tcp</code></em> is
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync provided for backwards
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync compatibility. The "vc" stands for "virtual circuit".
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Ignore truncation in UDP responses instead of retrying with TCP.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync default, TCP retries are performed.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Set the search list to contain the single domain
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>somename</code></em>, as if specified in
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <span><strong class="command">domain</strong></span> directive in
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <code class="filename">/etc/resolv.conf</code>, and enable
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync search list
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync processing as if the <em class="parameter"><code>+search</code></em>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync option were given.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]search</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Use [do not use] the search list defined by the searchlist or
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync directive in <code class="filename">resolv.conf</code> (if
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync The search list is not used by default.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Perform [do not perform] a search showing intermediate
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Sets the "aa" flag in the query.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Set [do not set] the AD (authentic data) bit in the query. The
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync currently has a standard meaning only in responses, not in
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync but the ability to set the bit in the query is provided for
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync completeness.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Set [do not set] the CD (checking disabled) bit in the query.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync requests the server to not perform DNSSEC validation of
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Display [do not display] the CLASS when printing the record.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Display [do not display] the TTL when printing the record.
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Toggle the setting of the RD (recursion desired) bit in the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync This bit is set by default, which means <span><strong class="command">dig</strong></span>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync normally sends recursive queries. Recursion is automatically
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync when the <em class="parameter"><code>+nssearch</code></em> or
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync <em class="parameter"><code>+trace</code></em> query options are
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync When this option is set, <span><strong class="command">dig</strong></span>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync attempts to find the
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync authoritative name servers for the zone containing the name
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync looked up and display the SOA record that each name server has
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync Toggle tracing of the delegation path from the root name servers
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync the name being looked up. Tracing is disabled by default. When
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync tracing is enabled, <span><strong class="command">dig</strong></span> makes
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync iterative queries to
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync resolve the name being looked up. It will follow referrals from
67259dc535458471f701aa4a4f3ff00d5736c0dfvboxsync root servers, showing the answer from each server that was used
<em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be