man.dig.html revision 25ae0fd27c7f65d235511e9b20f97f6ba92a14cf
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - Copyright (C) 2000-2003 Internet Software Consortium.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - Permission to use, copy, modify, and/or distribute this software for any
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - purpose with or without fee is hereby granted, provided that the above
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - copyright notice and this permission notice appear in all copies.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster - PERFORMANCE OF THIS SOFTWARE.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<!-- $Id$ -->
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
2075f399f27e30aaf713035e00b82e75bbb58f4cPeter Major<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<link rel="next" href="man.host.html" title="host">
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<table width="100%" summary="Navigation header">
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<tr><th colspan="3" align="center">dig</th></tr>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<th width="60%" align="center">Manual pages</th>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<a name="man.dig"></a><div class="titlepage"></div>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<p><span><strong class="command">dig</strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster (domain information groper) is a flexible tool
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster for interrogating DNS name servers. It performs DNS lookups and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster displays the answers that are returned from the name server(s) that
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster troubleshoot DNS problems because of its flexibility, ease of use and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster clarity of output. Other lookup tools tend to have less functionality
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster than <span><strong class="command">dig</strong></span>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Although <span><strong class="command">dig</strong></span> is normally used with
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster command-line
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster arguments, it also has a batch mode of operation for reading lookup
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster requests from a file. A brief summary of its command-line arguments
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster and options is printed when the <code class="option">-h</code> option is given.
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest Unlike earlier versions, the BIND 9 implementation of
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest command line.
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest Unless it is told to query a specific name server,
882df6887ad52745d38d9bf0d92b3ac6f7703126Peter Major <span><strong class="command">dig</strong></span> will try each of the servers listed in
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest are found, <span><strong class="command">dig</strong></span> will send the query to the local
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest When no command line arguments or options are given,
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="filename">${HOME}/.digrc</code>. This file is read and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster any options in it
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster are applied before the command line arguments.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The IN and CH class names overlap with the IN and CH top level
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster domain names. Either use the <code class="option">-t</code> and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="option">-c</code> options to specify the type and class,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster use the <code class="option">-q</code> the specify the domain name, or
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster use "IN." and "CH." when looking up these top level domains.
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest A typical invocation of <span><strong class="command">dig</strong></span> looks like:
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest<pre class="programlisting"> dig @server name type </pre>
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest<dt><span class="term"><code class="constant">server</code></span></dt>
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest is the name or IP address of the name server to query. This
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest can be an IPv4 address in dotted-decimal notation or an IPv6
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest address in colon-delimited notation. When the supplied
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <em class="parameter"><code>server</code></em> argument is a hostname,
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <span><strong class="command">dig</strong></span> resolves that name before querying
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest that name server.
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest If no <em class="parameter"><code>server</code></em> argument is
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest provided, <span><strong class="command">dig</strong></span> consults
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <code class="filename">/etc/resolv.conf</code>; if an
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest address is found there, it queries the name server at
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest that address. If either of the <code class="option">-4</code> or
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <code class="option">-6</code> options are in use, then
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest only addresses for the corresponding transport
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest will be tried. If no usable addresses are found,
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <span><strong class="command">dig</strong></span> will send the query to the
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest local host. The reply from the name server that
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest responds is displayed.
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest<dt><span class="term"><code class="constant">name</code></span></dt>
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest is the name of the resource record that is to be looked up.
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest<dt><span class="term"><code class="constant">type</code></span></dt>
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest indicates what type of query is required —
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest ANY, A, MX, SIG, etc.
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <em class="parameter"><code>type</code></em> can be any valid query
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <em class="parameter"><code>type</code></em> argument is supplied,
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest <span><strong class="command">dig</strong></span> will perform a lookup for an
0fdab8904a8fe223f6934b878769fe45e7651c60Andrew Forrest The <code class="option">-b</code> option sets the source IP address of the query
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster to <em class="parameter"><code>address</code></em>. This must be a valid
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster one of the host's network interfaces or "0.0.0.0" or "::". An optional
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster may be specified by appending "#<port>"
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The default query class (IN for internet) is overridden by the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster class, such as HS for Hesiod records or CH for Chaosnet records.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster in batch mode by reading a list of lookup requests to process from the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster file <em class="parameter"><code>filename</code></em>. The file contains a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster queries, one per line. Each entry in the file should be organized in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the same way they would be presented as queries to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span><strong class="command">dig</strong></span> using the command-line interface.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The <code class="option">-m</code> option enables memory usage debugging.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster If a non-standard port number is to be queried, the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the port number that <span><strong class="command">dig</strong></span> will send its
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster instead of the standard DNS port number 53. This option would be used
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster to test a name server that has been configured to listen for queries
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster on a non-standard port number.
4a48635cccc646ac479830fd4df0ee8e10c5bd8djeff.schenk The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster use IPv4 query transport. The <code class="option">-6</code> option forces
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The <code class="option">-t</code> option sets the query type to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>type</code></em>. It can be any valid query type
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster supported in BIND 9. The default query type is "A", unless the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="option">-x</code> option is supplied to indicate a reverse lookup.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster A zone transfer can be requested by specifying a type of AXFR. When
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster an incremental zone transfer (IXFR) is required,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
4a48635cccc646ac479830fd4df0ee8e10c5bd8djeff.schenk The incremental zone transfer will contain the changes made to the zone
4a48635cccc646ac479830fd4df0ee8e10c5bd8djeff.schenk since the serial number in the zone's SOA record was
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The <code class="option">-q</code> option sets the query name to
4a48635cccc646ac479830fd4df0ee8e10c5bd8djeff.schenk <em class="parameter"><code>name</code></em>. This is useful to distinguish the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>name</code></em> from other arguments.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The <code class="option">-v</code> causes <span><strong class="command">dig</strong></span> to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster print the version number and exit.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Reverse lookups — mapping addresses to names — are simplified by the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster address in dotted-decimal notation, or a colon-delimited IPv6 address.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster When this option is used, there is no need to provide the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster automatically performs a lookup for a name like
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster query type and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster class to PTR and IN respectively. By default, IPv6 addresses are
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster looked up using nibble format under the IP6.ARPA domain.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster To use the older RFC1886 method using the IP6.INT domain
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster are now experimental and are not attempted.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster responses using transaction signatures (TSIG), specify a TSIG key file
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster using the <code class="option">-k</code> option. You can also specify the TSIG
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster key itself on the command line using the <code class="option">-y</code> option;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>name</code></em> is the name of the TSIG key and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>key</code></em> is the actual key. The key is a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster encoded string, typically generated by
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Caution should be taken when using the <code class="option">-y</code> option on
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster multi-user systems as the key can be visible in the output from
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster or in the shell's history file. When
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster server that is queried needs to know the key and algorithm that is
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster being used. In BIND, this is done by providing appropriate
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<p><span><strong class="command">dig</strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster provides a number of query options which affect
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the way in which lookups are made and the results displayed. Some of
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster these set or reset flag bits in the query header, some determine which
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster sections of the answer get printed, and others determine the timeout
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster and retry strategies.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Each query option is identified by a keyword preceded by a plus sign
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster (<code class="literal">+</code>). Some keywords set or reset an
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster option. These may be preceded
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster by the string <code class="literal">no</code> to negate the meaning of
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster that keyword. Other
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster keywords assign values to options like the timeout interval. They
7be5aa496ae10e8d30aa6675df55e074cbb5cfedMark de Reeper have the form <code class="option">+keyword=value</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The query options are:
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Sets the "aa" flag in the query.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Display [do not display] the additional section of a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster reply. The default is to display it.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set [do not set] the AD (authentic data) bit in the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster query. This requests the server to return whether
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster all of the answer and authority sections have all
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster been validated as secure according to the security
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster policy of the server. AD=1 indicates that all records
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster have been validated as secure and the answer is not
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster from a OPT-OUT range. AD=0 indicate that some part
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster of the answer was insecure or not validated. This
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster bit is set by default.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]all</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set or clear all display flags.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Display [do not display] the answer section of a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster reply. The default is to display it.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Display [do not display] the authority section of a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster reply. The default is to display it.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
80849398a45dca1fb917716907d6ec99be6222c2Peter Major Attempt to display the contents of messages which are
7be5aa496ae10e8d30aa6675df55e074cbb5cfedMark de Reeper malformed. The default is to not display malformed
80849398a45dca1fb917716907d6ec99be6222c2Peter Major<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set the UDP message buffer size advertised using EDNS0
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster to <em class="parameter"><code>B</code></em> bytes. The maximum and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster minimum sizes of this buffer are 65535 and 0 respectively.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Values outside this range are rounded up or down
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster appropriately. Values other than zero will cause a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster EDNS query to be sent.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set [do not set] the CD (checking disabled) bit in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the query. This requests the server to not perform
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster DNSSEC validation of responses.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Display [do not display] the CLASS when printing the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Toggles the printing of the initial comment in the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster output identifying the version of <span><strong class="command">dig</strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster and the query options that have been applied. This
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster comment is printed by default.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Toggle the display of comment lines in the output.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The default is to print comments.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Toggle the display of cryptographic fields in DNSSEC
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster records. The contents of these field are unnecessary
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster to debug most DNSSEC validation failures and removing
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster them makes it easier to see the common failures. The
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster default is to display the fields. When omitted they
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster are replaced by the string "[omitted]" or in the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster DNSKEY case the key id is displayed as the replacement,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster e.g. "[ key id = value ]".
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Deprecated, treated as a synonym for
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>+[no]search</code></em>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Requests DNSSEC records be sent by setting the DNSSEC
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster OK bit (DO) in the OPT record in the additional section
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster of the query.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set the search list to contain the single domain
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>somename</code></em>, as if specified in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster a <span><strong class="command">domain</strong></span> directive in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="filename">/etc/resolv.conf</code>, and enable
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster search list processing as if the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>+search</code></em> option were given.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set the DSCP code point to be used when sending the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster query. Valid DSCP code points are in the range
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster [0..63]. By default no code point is explicitly set.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Specify the EDNS version to query with. Valid values
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster are 0 to 255. Setting the EDNS version will cause
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster a EDNS query to be sent. <code class="option">+noedns</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster clears the remembered EDNS version. EDNS is set to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster 0 by default.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set the must-be-zero EDNS flags bits (Z bits) to the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster specified value. Decimal, hex and octal encodings are
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster accepted. Setting a named flag (e.g. DO) will silently be
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster ignored. By default, no Z bits are set.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]ednsnegotiation</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Enable / disable EDNS version negotiation. By default
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster EDNS version negotiation is enabled.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Specify EDNS option with code point <code class="option">code</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster and optionally payload of <code class="option">value</code> as a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster hexadecimal string. <code class="option">+noednsopt</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster clears the EDNS options to be sent.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Send an EDNS Expire option.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Do not try the next server if you receive a SERVFAIL.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The default is to not try the next server which is
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the reverse of normal stub resolver behavior.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]header-only</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Send a query with a DNS header without a question section.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The default is to add a question section. The query type
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster and query name are ignored when this is set.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Show [or do not show] the IP address and port number
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster that supplied the answer when the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>+short</code></em> option is enabled. If
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster short form answers are requested, the default is not
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster to show the source address and port number of the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster server that provided the answer.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Ignore truncation in UDP responses instead of retrying
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster with TCP. By default, TCP retries are performed.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Keep the TCP socket open between queries and reuse
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster it rather than creating a new TCP socket for each
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster lookup. The default is <code class="option">+nokeepopen</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Print records like the SOA records in a verbose
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster multi-line format with human-readable comments. The
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster default is to print each record on a single line, to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster facilitate machine parsing of the <span><strong class="command">dig</strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set the number of dots that have to appear in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster for it to be considered absolute. The default value
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster is that defined using the ndots statement in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="filename">/etc/resolv.conf</code>, or 1 if no
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster ndots statement is present. Names with fewer dots
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster are interpreted as relative names and will be searched
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster for in the domains listed in the <code class="option">search</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster or <code class="option">domain</code> directive in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="filename">/etc/resolv.conf</code> if
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Include an EDNS name server ID request when sending
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster When this option is set, <span><strong class="command">dig</strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster attempts to find the authoritative name servers for
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the zone containing the name being looked up and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster display the SOA record that each name server has for
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Print only one (starting) SOA record when performing
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster an AXFR. The default is to print both the starting
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster and ending SOA records.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Print [do not print] the query as it is sent. By
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster default, the query is not printed.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]question</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Print [do not print] the question section of a query
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster when an answer is returned. The default is to print
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the question section as a comment.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Toggle the setting of the RD (recursion desired) bit
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster in the query. This bit is set by default, which means
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span><strong class="command">dig</strong></span> normally sends recursive
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster queries. Recursion is automatically disabled when
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the <em class="parameter"><code>+nssearch</code></em> or
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>+trace</code></em> query options are used.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+retry=T</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Sets the number of times to retry UDP queries to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster server to <em class="parameter"><code>T</code></em> instead of the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster this does not include the initial query.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Toggle the display of per-record comments in the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster output (for example, human-readable key information
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster about DNSKEY records). The default is not to print
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster record comments unless multiline mode is active.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]search</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Use [do not use] the search list defined by the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster searchlist or domain directive in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="filename">resolv.conf</code> (if any). The search
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster list is not used by default.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster 'ndots' from <code class="filename">resolv.conf</code> (default 1)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster which may be overridden by <em class="parameter"><code>+ndots</code></em>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster determines if the name will be treated as relative
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster or not and hence whether a search is eventually
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster performed or not.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]short</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Provide a terse answer. The default is to print the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster answer in a verbose form.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Perform [do not perform] a search showing intermediate
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Chase DNSSEC signature chains. Requires dig be
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster compiled with -DDIG_SIGCHASE.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]sit[<span class="optional">=####</span>]</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Send a Source Identity Token EDNS option, with optional
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster value. Replaying a SIT from a previous response will
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster allow the server to identify a previous client. The
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster default is <code class="option">+nosit</code>. Currently using
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster experimental value 65001 for the option code.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+split=W</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Split long hex- or base64-formatted fields in resource
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster records into chunks of <em class="parameter"><code>W</code></em>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster characters (where <em class="parameter"><code>W</code></em> is rounded
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster up to the nearest multiple of 4).
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>+nosplit</code></em> or
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>+split=0</code></em> causes fields not to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster be split at all. The default is 56 characters, or
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster 44 characters when multiline mode is active.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster This query option toggles the printing of statistics:
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster when the query was made, the size of the reply and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster so on. The default behavior is to print the query
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Send an EDNS Client Subnet option with the specified
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster IP address or network prefix.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Use [do not use] TCP when querying name servers. The
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster default behavior is to use UDP unless an
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="literal">ixfr=N</code> query is requested, in which
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster case the default is TCP. AXFR queries always use
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+time=T</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Sets the timeout for a query to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>T</code></em> seconds. The default
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster timeout is 5 seconds.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster An attempt to set <em class="parameter"><code>T</code></em> to less
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster than 1 will result
7be5aa496ae10e8d30aa6675df55e074cbb5cfedMark de Reeper in a query timeout of 1 second being applied.
7be5aa496ae10e8d30aa6675df55e074cbb5cfedMark de Reeper<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster When chasing DNSSEC signature chains perform a top-down
7be5aa496ae10e8d30aa6675df55e074cbb5cfedMark de Reeper validation. Requires dig be compiled with -DDIG_SIGCHASE.
7be5aa496ae10e8d30aa6675df55e074cbb5cfedMark de Reeper<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Toggle tracing of the delegation path from the root
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster name servers for the name being looked up. Tracing
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster is disabled by default. When tracing is enabled,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span><strong class="command">dig</strong></span> makes iterative queries to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster resolve the name being looked up. It will follow
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster referrals from the root servers, showing the answer
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster from each server that was used to resolve the lookup.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span><strong class="command">+dnssec</strong></span> is also set when +trace
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster is set to better emulate the default queries from a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+tries=T</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Sets the number of times to try UDP queries to server
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster to <em class="parameter"><code>T</code></em> instead of the default,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster 3. If <em class="parameter"><code>T</code></em> is less than or equal
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster to zero, the number of tries is silently rounded up
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Specifies a file containing trusted keys to be used
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster with <code class="option">+sigchase</code>. Each DNSKEY record
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster must be on its own line.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster If not specified, <span><strong class="command">dig</strong></span> will look
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster for <code class="filename">/etc/trusted-key.key</code> then
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <code class="filename">trusted-key.key</code> in the current
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Requires dig be compiled with -DDIG_SIGCHASE.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Display [do not display] the TTL when printing the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Display [do not display] the TTL in friendly human-readable
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster time units of "s", "m", "h", "d", and "w", representing
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster seconds, minutes, hours, days and weeks. Implies +ttlid.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Use [do not use] TCP when querying name servers. This
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster is provided for backwards compatibility. The "vc"
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster stands for "virtual circuit".
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster Set [do not set] the last unassigned DNS header flag in a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster DNS query. This flag is off by default.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<a name="id2668448"></a><h2>MULTIPLE QUERIES</h2>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The BIND 9 implementation of <span><strong class="command">dig </strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster specifying multiple queries on the command line (in addition to
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster supporting the <code class="option">-f</code> batch file option). Each of those
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster queries can be supplied with its own set of flags, options and query
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster In this case, each <em class="parameter"><code>query</code></em> argument
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster represent an
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster individual query in the command-line syntax described above. Each
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster consists of any of the standard options and flags, the name to be
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster looked up, an optional query type and class and any query options that
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster should be applied to that query.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster A global set of query options, which should be applied to all queries,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster can also be supplied. These global query options must precede the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster first tuple of name, class, type, options, flags, and query options
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster supplied on the command line. Any global query options (except
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the <code class="option">+[no]cmd</code> option) can be
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster overridden by a query-specific set of query options. For example:
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster shows how <span><strong class="command">dig</strong></span> could be used from the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster command line
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster reverse lookup of 127.0.0.1 and a query for the NS records of
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster A global query option of <em class="parameter"><code>+qr</code></em> is
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster that <span><strong class="command">dig</strong></span> shows the initial query it made
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster lookup. The final query has a local query option of
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster will not print the initial query when it looks up the NS records for
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster domain name) support, it can accept and display non-ASCII domain names.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span><strong class="command">dig</strong></span> appropriately converts character encoding of
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster domain name before sending a request to DNS server or displaying a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster reply from the server.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster If you'd like to turn off the IDN support for some reason, defines
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster the <code class="envar">IDN_DISABLE</code> environment variable.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster The IDN support is disabled if the variable is set when
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span><strong class="command">dig</strong></span> runs.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<p><code class="filename">/etc/resolv.conf</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster There are probably too many query options.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<table width="100%" summary="Navigation footer">
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<td width="40%" align="left" valign="top">Manual pages�</td>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<td width="40%" align="right" valign="top">�host</td>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster<p style="text-align: center;">BIND 9.11.0pre-alpha</p>