man.dig.html revision 2f161339d28f61a05dd92bbe01ce754e32e35add
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - Copyright (C) 2000-2003 Internet Software Consortium.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - Permission to use, copy, modify, and/or distribute this software for any
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - purpose with or without fee is hereby granted, provided that the above
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - copyright notice and this permission notice appear in all copies.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson - PERFORMANCE OF THIS SOFTWARE.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<link rel="prev" href="Bv9ARM.ch13.html" title="Manual pages">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<link rel="next" href="man.host.html" title="host">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<table width="100%" summary="Navigation header">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<tr><th colspan="3" align="center">dig</th></tr>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<th width="60%" align="center">Manual pages</th>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<a name="man.dig"></a><div class="titlepage"></div>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<p><span><strong class="command">dig</strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson (domain information groper) is a flexible tool
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson for interrogating DNS name servers. It performs DNS lookups and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson displays the answers that are returned from the name server(s) that
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson troubleshoot DNS problems because of its flexibility, ease of use and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson clarity of output. Other lookup tools tend to have less functionality
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson than <span><strong class="command">dig</strong></span>.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Although <span><strong class="command">dig</strong></span> is normally used with
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson arguments, it also has a batch mode of operation for reading lookup
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson requests from a file. A brief summary of its command-line arguments
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson and options is printed when the <code class="option">-h</code> option is given.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Unlike earlier versions, the BIND 9 implementation of
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson command line.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Unless it is told to query a specific name server,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> will try each of the servers listed in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson are found, <span><strong class="command">dig</strong></span> will send the query to the local
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson When no command line arguments or options are given,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="filename">${HOME}/.digrc</code>. This file is read and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson any options in it
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson are applied before the command line arguments.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The IN and CH class names overlap with the IN and CH top level
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson domain names. Either use the <code class="option">-t</code> and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="option">-c</code> options to specify the type and class,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson use the <code class="option">-q</code> the specify the domain name, or
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson use "IN." and "CH." when looking up these top level domains.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson A typical invocation of <span><strong class="command">dig</strong></span> looks like:
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<pre class="programlisting"> dig @server name type </pre>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="constant">server</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson is the name or IP address of the name server to query. This
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson can be an IPv4 address in dotted-decimal notation or an IPv6
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson address in colon-delimited notation. When the supplied
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>server</code></em> argument is a hostname,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> resolves that name before querying
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson that name server.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson If no <em class="parameter"><code>server</code></em> argument is
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson provided, <span><strong class="command">dig</strong></span> consults
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="filename">/etc/resolv.conf</code>; if an
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson address is found there, it queries the name server at
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson that address. If either of the <code class="option">-4</code> or
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="option">-6</code> options are in use, then
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson only addresses for the corresponding transport
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson will be tried. If no usable addresses are found,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> will send the query to the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson local host. The reply from the name server that
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson responds is displayed.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="constant">name</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson is the name of the resource record that is to be looked up.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="constant">type</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson indicates what type of query is required —
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson ANY, A, MX, SIG, etc.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>type</code></em> can be any valid query
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>type</code></em> argument is supplied,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> will perform a lookup for an
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The <code class="option">-b</code> option sets the source IP address of the query
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson to <em class="parameter"><code>address</code></em>. This must be a valid
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson one of the host's network interfaces or "0.0.0.0" or "::". An optional
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson may be specified by appending "#<port>"
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The default query class (IN for internet) is overridden by the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson class, such as HS for Hesiod records or CH for Chaosnet records.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson in batch mode by reading a list of lookup requests to process from the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson file <em class="parameter"><code>filename</code></em>. The file contains a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson queries, one per line. Each entry in the file should be organized in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the same way they would be presented as queries to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> using the command-line interface.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The <code class="option">-m</code> option enables memory usage debugging.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson If a non-standard port number is to be queried, the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the port number that <span><strong class="command">dig</strong></span> will send its
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson instead of the standard DNS port number 53. This option would be used
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson to test a name server that has been configured to listen for queries
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson on a non-standard port number.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson use IPv4 query transport. The <code class="option">-6</code> option forces
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The <code class="option">-t</code> option sets the query type to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>type</code></em>. It can be any valid query type
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson supported in BIND 9. The default query type is "A", unless the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="option">-x</code> option is supplied to indicate a reverse lookup.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson A zone transfer can be requested by specifying a type of AXFR. When
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson an incremental zone transfer (IXFR) is required,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The incremental zone transfer will contain the changes made to the zone
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson since the serial number in the zone's SOA record was
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The <code class="option">-q</code> option sets the query name to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>name</code></em>. This is useful to distinguish the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>name</code></em> from other arguments.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The <code class="option">-v</code> causes <span><strong class="command">dig</strong></span> to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson print the version number and exit.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Reverse lookups — mapping addresses to names — are simplified by the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson address in dotted-decimal notation, or a colon-delimited IPv6 address.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson When this option is used, there is no need to provide the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson automatically performs a lookup for a name like
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson query type and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson class to PTR and IN respectively. By default, IPv6 addresses are
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson looked up using nibble format under the IP6.ARPA domain.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson To use the older RFC1886 method using the IP6.INT domain
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson are now experimental and are not attempted.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson responses using transaction signatures (TSIG), specify a TSIG key file
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson using the <code class="option">-k</code> option. You can also specify the TSIG
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson key itself on the command line using the <code class="option">-y</code> option;
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>name</code></em> is the name of the TSIG key and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>key</code></em> is the actual key. The key is a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson encoded string, typically generated by
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Caution should be taken when using the <code class="option">-y</code> option on
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson multi-user systems as the key can be visible in the output from
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson or in the shell's history file. When
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson server that is queried needs to know the key and algorithm that is
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson being used. In BIND, this is done by providing appropriate
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<p><span><strong class="command">dig</strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson provides a number of query options which affect
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the way in which lookups are made and the results displayed. Some of
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson these set or reset flag bits in the query header, some determine which
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson sections of the answer get printed, and others determine the timeout
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson and retry strategies.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Each query option is identified by a keyword preceded by a plus sign
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson (<code class="literal">+</code>). Some keywords set or reset an
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson option. These may be preceded
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson by the string <code class="literal">no</code> to negate the meaning of
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson that keyword. Other
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson keywords assign values to options like the timeout interval. They
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson have the form <code class="option">+keyword=value</code>.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The query options are:
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Sets the "aa" flag in the query.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Display [do not display] the additional section of a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson reply. The default is to display it.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set [do not set] the AD (authentic data) bit in the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson query. This requests the server to return whether
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson all of the answer and authority sections have all
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson been validated as secure according to the security
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson policy of the server. AD=1 indicates that all records
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson have been validated as secure and the answer is not
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson from a OPT-OUT range. AD=0 indicate that some part
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson of the answer was insecure or not validated. This
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson bit is set by default.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]all</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set or clear all display flags.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Display [do not display] the answer section of a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson reply. The default is to display it.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Display [do not display] the authority section of a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson reply. The default is to display it.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Attempt to display the contents of messages which are
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson malformed. The default is to not display malformed
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set the UDP message buffer size advertised using EDNS0
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson to <em class="parameter"><code>B</code></em> bytes. The maximum and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson minimum sizes of this buffer are 65535 and 0 respectively.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Values outside this range are rounded up or down
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson appropriately. Values other than zero will cause a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson EDNS query to be sent.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set [do not set] the CD (checking disabled) bit in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the query. This requests the server to not perform
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson DNSSEC validation of responses.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Display [do not display] the CLASS when printing the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Toggles the printing of the initial comment in the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson output identifying the version of <span><strong class="command">dig</strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson and the query options that have been applied. This
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson comment is printed by default.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Toggle the display of comment lines in the output.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The default is to print comments.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Toggle the display of cryptographic fields in DNSSEC
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson records. The contents of these field are unnecessary
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson to debug most DNSSEC validation failures and removing
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson them makes it easier to see the common failures. The
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson default is to display the fields. When omitted they
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson are replaced by the string "[omitted]" or in the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson DNSKEY case the key id is displayed as the replacement,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson e.g. "[ key id = value ]".
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Deprecated, treated as a synonym for
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>+[no]search</code></em>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Requests DNSSEC records be sent by setting the DNSSEC
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson OK bit (DO) in the OPT record in the additional section
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson of the query.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set the search list to contain the single domain
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>somename</code></em>, as if specified in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson a <span><strong class="command">domain</strong></span> directive in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="filename">/etc/resolv.conf</code>, and enable
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson search list processing as if the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>+search</code></em> option were given.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set the DSCP code point to be used when sending the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson query. Valid DSCP code points are in the range
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson [0..63]. By default no code point is explicitly set.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Specify the EDNS version to query with. Valid values
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson are 0 to 255. Setting the EDNS version will cause
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson a EDNS query to be sent. <code class="option">+noedns</code>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson clears the remembered EDNS version. EDNS is set to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson 0 by default.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set the must-be-zero EDNS flags bits (Z bits) to the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson specified value. Decimal, hex and octal encodings are
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson accepted. Setting a named flag (e.g. DO) will silently be
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson ignored. By default, no Z bits are set.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]ednsnegotiation</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Enable / disable EDNS version negotiation. By default
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson EDNS version negotiation is enabled.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Specify EDNS option with code point <code class="option">code</code>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson and optionally payload of <code class="option">value</code> as a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson hexadecimal string. <code class="option">+noednsopt</code>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson clears the EDNS options to be sent.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Send an EDNS Expire option.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Do not try the next server if you receive a SERVFAIL.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The default is to not try the next server which is
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the reverse of normal stub resolver behavior.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]header-only</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Send a query with a DNS header without a question section.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The default is to add a question section. The query type
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson and query name are ignored when this is set.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Show [or do not show] the IP address and port number
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson that supplied the answer when the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>+short</code></em> option is enabled. If
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson short form answers are requested, the default is not
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson to show the source address and port number of the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson server that provided the answer.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Ignore truncation in UDP responses instead of retrying
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson with TCP. By default, TCP retries are performed.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Keep the TCP socket open between queries and reuse
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson it rather than creating a new TCP socket for each
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson lookup. The default is <code class="option">+nokeepopen</code>.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Print records like the SOA records in a verbose
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson multi-line format with human-readable comments. The
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson default is to print each record on a single line, to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson facilitate machine parsing of the <span><strong class="command">dig</strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set the number of dots that have to appear in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson for it to be considered absolute. The default value
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson is that defined using the ndots statement in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="filename">/etc/resolv.conf</code>, or 1 if no
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson ndots statement is present. Names with fewer dots
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson are interpreted as relative names and will be searched
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson for in the domains listed in the <code class="option">search</code>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson or <code class="option">domain</code> directive in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="filename">/etc/resolv.conf</code> if
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Include an EDNS name server ID request when sending
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson When this option is set, <span><strong class="command">dig</strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson attempts to find the authoritative name servers for
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the zone containing the name being looked up and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson display the SOA record that each name server has for
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Print only one (starting) SOA record when performing
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson an AXFR. The default is to print both the starting
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson and ending SOA records.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Print [do not print] the query as it is sent. By
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson default, the query is not printed.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]question</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Print [do not print] the question section of a query
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson when an answer is returned. The default is to print
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the question section as a comment.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Toggle the setting of the RD (recursion desired) bit
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson in the query. This bit is set by default, which means
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> normally sends recursive
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson queries. Recursion is automatically disabled when
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the <em class="parameter"><code>+nssearch</code></em> or
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>+trace</code></em> query options are used.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+retry=T</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Sets the number of times to retry UDP queries to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson server to <em class="parameter"><code>T</code></em> instead of the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson this does not include the initial query.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Toggle the display of per-record comments in the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson output (for example, human-readable key information
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson about DNSKEY records). The default is not to print
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson record comments unless multiline mode is active.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]search</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Use [do not use] the search list defined by the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson searchlist or domain directive in
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="filename">resolv.conf</code> (if any). The search
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson list is not used by default.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson 'ndots' from <code class="filename">resolv.conf</code> (default 1)
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson which may be overridden by <em class="parameter"><code>+ndots</code></em>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson determines if the name will be treated as relative
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson or not and hence whether a search is eventually
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson performed or not.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]short</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Provide a terse answer. The default is to print the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson answer in a verbose form.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Perform [do not perform] a search showing intermediate
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Chase DNSSEC signature chains. Requires dig be
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson compiled with -DDIG_SIGCHASE.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]sit[<span class="optional">=####</span>]</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Send a Source Identity Token EDNS option, with optional
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson value. Replaying a SIT from a previous response will
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson allow the server to identify a previous client. The
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson default is <code class="option">+nosit</code>. Currently using
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson experimental value 65001 for the option code.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+split=W</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Split long hex- or base64-formatted fields in resource
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson records into chunks of <em class="parameter"><code>W</code></em>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson characters (where <em class="parameter"><code>W</code></em> is rounded
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson up to the nearest multiple of 4).
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>+nosplit</code></em> or
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>+split=0</code></em> causes fields not to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson be split at all. The default is 56 characters, or
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson 44 characters when multiline mode is active.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson This query option toggles the printing of statistics:
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson when the query was made, the size of the reply and
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson so on. The default behavior is to print the query
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Send an EDNS Client Subnet option with the specified
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson IP address or network prefix.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Use [do not use] TCP when querying name servers. The
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson default behavior is to use UDP unless an
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="literal">ixfr=N</code> query is requested, in which
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson case the default is TCP. AXFR queries always use
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+time=T</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Sets the timeout for a query to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>T</code></em> seconds. The default
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson timeout is 5 seconds.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson An attempt to set <em class="parameter"><code>T</code></em> to less
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson than 1 will result
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson in a query timeout of 1 second being applied.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson When chasing DNSSEC signature chains perform a top-down
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson validation. Requires dig be compiled with -DDIG_SIGCHASE.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Toggle tracing of the delegation path from the root
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson name servers for the name being looked up. Tracing
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson is disabled by default. When tracing is enabled,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> makes iterative queries to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson resolve the name being looked up. It will follow
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson referrals from the root servers, showing the answer
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson from each server that was used to resolve the lookup.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">+dnssec</strong></span> is also set when +trace
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson is set to better emulate the default queries from a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+tries=T</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Sets the number of times to try UDP queries to server
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson to <em class="parameter"><code>T</code></em> instead of the default,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson 3. If <em class="parameter"><code>T</code></em> is less than or equal
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson to zero, the number of tries is silently rounded up
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Specifies a file containing trusted keys to be used
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson with <code class="option">+sigchase</code>. Each DNSKEY record
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson must be on its own line.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson If not specified, <span><strong class="command">dig</strong></span> will look
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson for <code class="filename">/etc/trusted-key.key</code> then
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <code class="filename">trusted-key.key</code> in the current
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Requires dig be compiled with -DDIG_SIGCHASE.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Display [do not display] the TTL when printing the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Display [do not display] the TTL in friendly human-readable
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson time units of "s", "m", "h", "d", and "w", representing
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson seconds, minutes, hours, days and weeks. Implies +ttlid.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Use [do not use] TCP when querying name servers. This
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson is provided for backwards compatibility. The "vc"
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson stands for "virtual circuit".
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson Set [do not set] the last unassigned DNS header flag in a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson DNS query. This flag is off by default.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<a name="id2668906"></a><h2>MULTIPLE QUERIES</h2>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The BIND 9 implementation of <span><strong class="command">dig </strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson specifying multiple queries on the command line (in addition to
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson supporting the <code class="option">-f</code> batch file option). Each of those
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson queries can be supplied with its own set of flags, options and query
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson In this case, each <em class="parameter"><code>query</code></em> argument
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson individual query in the command-line syntax described above. Each
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson consists of any of the standard options and flags, the name to be
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson looked up, an optional query type and class and any query options that
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson should be applied to that query.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson A global set of query options, which should be applied to all queries,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson can also be supplied. These global query options must precede the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson first tuple of name, class, type, options, flags, and query options
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson supplied on the command line. Any global query options (except
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the <code class="option">+[no]cmd</code> option) can be
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson overridden by a query-specific set of query options. For example:
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilsondig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson shows how <span><strong class="command">dig</strong></span> could be used from the
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson reverse lookup of 127.0.0.1 and a query for the NS records of
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson A global query option of <em class="parameter"><code>+qr</code></em> is
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson that <span><strong class="command">dig</strong></span> shows the initial query it made
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson lookup. The final query has a local query option of
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson will not print the initial query when it looks up the NS records for
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson domain name) support, it can accept and display non-ASCII domain names.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> appropriately converts character encoding of
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson domain name before sending a request to DNS server or displaying a
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson reply from the server.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson If you'd like to turn off the IDN support for some reason, defines
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson the <code class="envar">IDN_DISABLE</code> environment variable.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson The IDN support is disabled if the variable is set when
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span><strong class="command">dig</strong></span> runs.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<p><code class="filename">/etc/resolv.conf</code>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<p><code class="filename">${HOME}/.digrc</code>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson There are probably too many query options.
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<table width="100%" summary="Navigation footer">
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<td width="40%" align="left" valign="top">Manual pages�</td>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<td width="40%" align="right" valign="top">�host</td>
c39daf7c259966ff0c2d316a3c57b4614729372cneil_a_wilson<p style="text-align: center;">BIND 9.11.0pre-alpha</p>