man.dig.html revision 3a32ac2a720653083c7a22cb654b86c398f6d4c8
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - Permission to use, copy, modify, and/or distribute this software for any
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - purpose with or without fee is hereby granted, provided that the above
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - copyright notice and this permission notice appear in all copies.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync - PERFORMANCE OF THIS SOFTWARE.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<!-- $Id$ -->
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<p><span><strong class="command">dig</strong></span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync (domain information groper) is a flexible tool
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync for interrogating DNS name servers. It performs DNS lookups and
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync displays the answers that are returned from the name server(s) that
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
d1966fe9681e9a100f8c895f08e450fc32dafd48vboxsync troubleshoot DNS problems because of its flexibility, ease of use and
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync clarity of output. Other lookup tools tend to have less functionality
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync than <span><strong class="command">dig</strong></span>.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Although <span><strong class="command">dig</strong></span> is normally used with
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync command-line
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync arguments, it also has a batch mode of operation for reading lookup
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync requests from a file. A brief summary of its command-line arguments
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync and options is printed when the <code class="option">-h</code> option is given.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Unlike earlier versions, the BIND 9 implementation of
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync command line.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Unless it is told to query a specific name server,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> will try each of the servers listed in
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="filename">/etc/resolv.conf</code>. If no usable server addreses
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync are found, <span><strong class="command">dig</strong></span> will send the query to the local
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync When no command line arguments or options are given,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="filename">${HOME}/.digrc</code>. This file is read and
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync any options in it
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync are applied before the command line arguments.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The IN and CH class names overlap with the IN and CH top level
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync domains names. Either use the <code class="option">-t</code> and
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="option">-c</code> options to specify the type and class,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync use the <code class="option">-q</code> the specify the domain name, or
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync use "IN." and "CH." when looking up these top level domains.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync A typical invocation of <span><strong class="command">dig</strong></span> looks like:
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<pre class="programlisting"> dig @server name type </pre>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="constant">server</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync is the name or IP address of the name server to query. This
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync can be an IPv4 address in dotted-decimal notation or an IPv6
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync address in colon-delimited notation. When the supplied
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>server</code></em> argument is a hostname,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> resolves that name before querying
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync that name server.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync If no <em class="parameter"><code>server</code></em> argument is
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync provided, <span><strong class="command">dig</strong></span> consults
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="filename">/etc/resolv.conf</code>; if an
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync address is found there, it queries the name server at
d1966fe9681e9a100f8c895f08e450fc32dafd48vboxsync that address. If either of the <code class="option">-4</code> or
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="option">-6</code> options are in use, then
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync only addresses for the corresponding transport
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync will be tried. If no usable addresses are found,
d1966fe9681e9a100f8c895f08e450fc32dafd48vboxsync <span><strong class="command">dig</strong></span> will send the query to the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync local host. The reply from the name server that
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync responds is displayed.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="constant">name</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync is the name of the resource record that is to be looked up.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="constant">type</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync indicates what type of query is required —
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync ANY, A, MX, SIG, etc.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>type</code></em> can be any valid query
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync type. If no
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>type</code></em> argument is supplied,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> will perform a lookup for an
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The <code class="option">-b</code> option sets the source IP address of the query
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync to <em class="parameter"><code>address</code></em>. This must be a valid
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync one of the host's network interfaces or "0.0.0.0" or "::". An optional
7d0cc752907fa7423e9d6558ecea067a10f0dd77vboxsync may be specified by appending "#<port>"
7d0cc752907fa7423e9d6558ecea067a10f0dd77vboxsync The default query class (IN for internet) is overridden by the
7d0cc752907fa7423e9d6558ecea067a10f0dd77vboxsync <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
7d0cc752907fa7423e9d6558ecea067a10f0dd77vboxsync class, such as HS for Hesiod records or CH for Chaosnet records.
7d0cc752907fa7423e9d6558ecea067a10f0dd77vboxsync The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync in batch mode by reading a list of lookup requests to process from the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync file <em class="parameter"><code>filename</code></em>. The file contains a
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync queries, one per line. Each entry in the file should be organized in
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync the same way they would be presented as queries to
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> using the command-line interface.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The <code class="option">-m</code> option enables memory usage debugging.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync If a non-standard port number is to be queried, the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync the port number that <span><strong class="command">dig</strong></span> will send its
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync instead of the standard DNS port number 53. This option would be used
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync to test a name server that has been configured to listen for queries
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync on a non-standard port number.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync use IPv4 query transport. The <code class="option">-6</code> option forces
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The <code class="option">-t</code> option sets the query type to
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>type</code></em>. It can be any valid query type
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync supported in BIND 9. The default query type is "A", unless the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="option">-x</code> option is supplied to indicate a reverse lookup.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync A zone transfer can be requested by specifying a type of AXFR. When
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync an incremental zone transfer (IXFR) is required,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The incremental zone transfer will contain the changes made to the zone
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync since the serial number in the zone's SOA record was
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The <code class="option">-q</code> option sets the query name to
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>name</code></em>. This useful do distinguish the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>name</code></em> from other arguments.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Reverse lookups — mapping addresses to names — are simplified by the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync address in dotted-decimal notation, or a colon-delimited IPv6 address.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync When this option is used, there is no need to provide the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync automatically performs a lookup for a name like
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync query type and
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync class to PTR and IN respectively. By default, IPv6 addresses are
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync looked up using nibble format under the IP6.ARPA domain.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync To use the older RFC1886 method using the IP6.INT domain
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync are now experimental and are not attempted.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync responses using transaction signatures (TSIG), specify a TSIG key file
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync using the <code class="option">-k</code> option. You can also specify the TSIG
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync key itself on the command line using the <code class="option">-y</code> option;
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>name</code></em> is the name of the TSIG key and
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>key</code></em> is the actual key. The key is a
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync encoded string, typically generated by
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Caution should be taken when using the <code class="option">-y</code> option on
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync multi-user systems as the key can be visible in the output from
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync or in the shell's history file. When
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync server that is queried needs to know the key and algorithm that is
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync being used. In BIND, this is done by providing appropriate
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<p><span><strong class="command">dig</strong></span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync provides a number of query options which affect
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync the way in which lookups are made and the results displayed. Some of
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync these set or reset flag bits in the query header, some determine which
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync sections of the answer get printed, and others determine the timeout
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync and retry strategies.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Each query option is identified by a keyword preceded by a plus sign
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync (<code class="literal">+</code>). Some keywords set or reset an
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync option. These may be preceded
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync by the string <code class="literal">no</code> to negate the meaning of
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync that keyword. Other
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync keywords assign values to options like the timeout interval. They
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync have the form <code class="option">+keyword=value</code>.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The query options are:
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Use [do not use] TCP when querying name servers. The default
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync behavior is to use UDP unless an AXFR or IXFR query is
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync requested, in
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync which case a TCP connection is used.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Use [do not use] TCP when querying name servers. This alternate
d1966fe9681e9a100f8c895f08e450fc32dafd48vboxsync syntax to <em class="parameter"><code>+[no]tcp</code></em> is
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync provided for backwards
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync compatibility. The "vc" stands for "virtual circuit".
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Ignore truncation in UDP responses instead of retrying with TCP.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync default, TCP retries are performed.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Set the search list to contain the single domain
d1966fe9681e9a100f8c895f08e450fc32dafd48vboxsync <em class="parameter"><code>somename</code></em>, as if specified in
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">domain</strong></span> directive in
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <code class="filename">/etc/resolv.conf</code>, and enable
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync search list
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync processing as if the <em class="parameter"><code>+search</code></em>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync option were given.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]search</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Use [do not use] the search list defined by the searchlist or
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync directive in <code class="filename">resolv.conf</code> (if
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The search list is not used by default.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Perform [do not perform] a search showing intermediate
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Sets the "aa" flag in the query.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
7d0cc752907fa7423e9d6558ecea067a10f0dd77vboxsync<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Set [do not set] the AD (authentic data) bit in the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync query. This requests the server to return whether
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync all of the answer and authority sections have all
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync been validated as secure according to the security
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync policy of the server. AD=1 indicates that all records
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync have been validated as secure and the answer is not
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync from a OPT-OUT range. AD=0 indicate that some part
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync of the answer was insecure or not validated. This
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync bit is set by default.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Set [do not set] the CD (checking disabled) bit in the query.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync requests the server to not perform DNSSEC validation of
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Display [do not display] the CLASS when printing the record.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Display [do not display] the TTL when printing the record.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Toggle the setting of the RD (recursion desired) bit
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync in the query. This bit is set by default, which means
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> normally sends recursive
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync queries. Recursion is automatically disabled when
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync the <em class="parameter"><code>+nssearch</code></em> or
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>+trace</code></em> query options are used.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync When this option is set, <span><strong class="command">dig</strong></span>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync attempts to find the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync authoritative name servers for the zone containing the name
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync looked up and display the SOA record that each name server has
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Toggle tracing of the delegation path from the root
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync name servers for the name being looked up. Tracing
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync is disabled by default. When tracing is enabled,
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">dig</strong></span> makes iterative queries to
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync resolve the name being looked up. It will follow
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync referrals from the root servers, showing the answer
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync from each server that was used to resolve the lookup.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <span><strong class="command">+dnssec</strong></span> is also set when +trace is
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync set to better emulate the default queries from a nameserver.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Toggles the printing of the initial comment in the output
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync identifying
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync the version of <span><strong class="command">dig</strong></span> and the query
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync options that have
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync been applied. This comment is printed by default.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]short</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Provide a terse answer. The default is to print the answer in a
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync verbose form.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Show [or do not show] the IP address and port number that
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync supplied the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync answer when the <em class="parameter"><code>+short</code></em> option
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync is enabled. If
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync short form answers are requested, the default is not to show the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync source address and port number of the server that provided the
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Toggle the display of comment lines in the output. The default
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync is to print comments.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Toggle the display of per-record comments in the output (for
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync example, human-readable key information about DNSKEY records).
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync The default is not to print record comments unless multiline
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync mode is active.
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync<dt><span class="term"><code class="option">+split=W</code></span></dt>
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync Split long hex- or base64-formatted fields in resource
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync records into chunks of <em class="parameter"><code>W</code></em> characters
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync (where <em class="parameter"><code>W</code></em> is rounded up to the nearest
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync multiple of 4).
b1d7d513c459787311cd09c440524044fa7ff8a9vboxsync <em class="parameter"><code>+nosplit</code></em> or
<em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be