2N/A - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC") 2N/A - Copyright (C) 2000-2003 Internet Software Consortium. 2N/A - Permission to use, copy, modify, and/or distribute this software for any 2N/A - purpose with or without fee is hereby granted, provided that the above 2N/A - copyright notice and this permission notice appear in all copies. 2N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 2N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 2N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 2N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 2N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 2N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 2N/A - PERFORMANCE OF THIS SOFTWARE. 2N/A<
meta http-
equiv="Content-Type" content="text/html; charset=ISO-8859-1">
2N/A<
meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
2N/A<
link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
2N/A<
body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
2N/A<
div class="navheader">
2N/A<
table width="100%" summary="Navigation header">
2N/A<
tr><
th colspan="3" align="center">dig</
th></
tr>
2N/A<
td width="20%" align="left">
2N/A<
th width="60%" align="center">Manual pages</
th>
2N/A<
div class="refentry" lang="en">
2N/A<
a name="man.dig"></
a><
div class="titlepage"></
div>
2N/A<
div class="refnamediv">
2N/A<
p>dig — DNS lookup utility</
p>
2N/A<
div class="refsynopsisdiv">
2N/A<
div class="cmdsynopsis"><
p><
code class="command">dig</
code> [@server] [<
code class="option">-b <
em class="replaceable"><
code>address</
code></
em></
code>] [<
code class="option">-c <
em class="replaceable"><
code>class</
code></
em></
code>] [<
code class="option">-f <
em class="replaceable"><
code>filename</
code></
em></
code>] [<
code class="option">-k <
em class="replaceable"><
code>filename</
code></
em></
code>] [<
code class="option">-m</
code>] [<
code class="option">-p <
em class="replaceable"><
code>port#</
code></
em></
code>] [<
code class="option">-q <
em class="replaceable"><
code>name</
code></
em></
code>] [<
code class="option">-t <
em class="replaceable"><
code>type</
code></
em></
code>] [<
code class="option">-v</
code>] [<
code class="option">-x <
em class="replaceable"><
code>addr</
code></
em></
code>] [<
code class="option">-y <
em class="replaceable"><
code>[<
span class="optional">hmac:</
span>]name:key</
code></
em></
code>] [<
code class="option">-4</
code>] [<
code class="option">-6</
code>] [name] [type] [class] [queryopt...]</
p></
div>
2N/A<
div class="cmdsynopsis"><
p><
code class="command">dig</
code> [<
code class="option">-h</
code>]</
p></
div>
2N/A<
div class="cmdsynopsis"><
p><
code class="command">dig</
code> [global-queryopt...] [query...]</
p></
div>
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2614113"></
a><
h2>DESCRIPTION</
h2>
2N/A<
p><
span><
strong class="command">dig</
strong></
span>
2N/A (domain information groper) is a flexible tool
2N/A for interrogating DNS name servers. It performs DNS lookups and
2N/A displays the answers that are returned from the name server(s) that
2N/A were queried. Most DNS administrators use <
span><
strong class="command">dig</
strong></
span> to
2N/A troubleshoot DNS problems because of its flexibility, ease of use and
2N/A clarity of output. Other lookup tools tend to have less functionality
2N/A than <
span><
strong class="command">dig</
strong></
span>.
2N/A Although <
span><
strong class="command">dig</
strong></
span> is normally used with
2N/A arguments, it also has a batch mode of operation for reading lookup
2N/A requests from a file. A brief summary of its command-line arguments
2N/A and options is printed when the <
code class="option">-h</
code> option is given.
2N/A Unlike earlier versions, the BIND 9 implementation of
2N/A <
span><
strong class="command">dig</
strong></
span> allows multiple lookups to be issued
2N/A Unless it is told to query a specific name server,
2N/A <
span><
strong class="command">dig</
strong></
span> will try each of the servers listed in
2N/A are found, <
span><
strong class="command">dig</
strong></
span> will send the query to the local
2N/A When no command line arguments or options are given,
2N/A <
span><
strong class="command">dig</
strong></
span> will perform an NS query for "." (the root).
2N/A It is possible to set per-user defaults for <
span><
strong class="command">dig</
strong></
span> via
2N/A <
code class="filename">${HOME}/.digrc</
code>. This file is read and
2N/A are applied before the command line arguments.
2N/A The IN and CH class names overlap with the IN and CH top level
2N/A domain names. Either use the <
code class="option">-t</
code> and
2N/A <
code class="option">-c</
code> options to specify the type and class,
2N/A use the <
code class="option">-q</
code> the specify the domain name, or
2N/A use "IN." and "CH." when looking up these top level domains.
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2614215"></
a><
h2>SIMPLE USAGE</
h2>
2N/A A typical invocation of <
span><
strong class="command">dig</
strong></
span> looks like:
2N/A<
pre class="programlisting"> dig @server name type </
pre>
2N/A<
div class="variablelist"><
dl>
2N/A<
dt><
span class="term"><
code class="constant">server</
code></
span></
dt>
2N/A is the name or IP address of the name server to query. This
2N/A can be an IPv4 address in dotted-decimal notation or an IPv6
2N/A address in colon-delimited notation. When the supplied
2N/A <
em class="parameter"><
code>server</
code></
em> argument is a hostname,
2N/A <
span><
strong class="command">dig</
strong></
span> resolves that name before querying
2N/A If no <
em class="parameter"><
code>server</
code></
em> argument is
2N/A provided, <
span><
strong class="command">dig</
strong></
span> consults
2N/A address is found there, it queries the name server at
2N/A that address. If either of the <
code class="option">-4</
code> or
2N/A <
code class="option">-6</
code> options are in use, then
2N/A only addresses for the corresponding transport
2N/A will be tried. If no usable addresses are found,
2N/A <
span><
strong class="command">dig</
strong></
span> will send the query to the
2N/A local host. The reply from the name server that
2N/A responds is displayed.
2N/A<
dt><
span class="term"><
code class="constant">name</
code></
span></
dt>
2N/A is the name of the resource record that is to be looked up.
2N/A<
dt><
span class="term"><
code class="constant">type</
code></
span></
dt>
2N/A indicates what type of query is required —
2N/A ANY, A, MX, SIG, etc.
2N/A <
em class="parameter"><
code>type</
code></
em> can be any valid query
2N/A <
em class="parameter"><
code>type</
code></
em> argument is supplied,
2N/A <
span><
strong class="command">dig</
strong></
span> will perform a lookup for an
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2614341"></
a><
h2>OPTIONS</
h2>
2N/A The <
code class="option">-b</
code> option sets the source IP address of the query
2N/A to <
em class="parameter"><
code>address</
code></
em>. This must be a valid
2N/A one of the host's network interfaces or "0.0.0.0" or "::". An optional
2N/A may be specified by appending "#<port>"
2N/A The default query class (IN for internet) is overridden by the
2N/A <
code class="option">-c</
code> option. <
em class="parameter"><
code>class</
code></
em> is
2N/A class, such as HS for Hesiod records or CH for Chaosnet records.
2N/A The <
code class="option">-f</
code> option makes <
span><
strong class="command">dig </
strong></
span>
2N/A in batch mode by reading a list of lookup requests to process from the
2N/A file <
em class="parameter"><
code>filename</
code></
em>. The file contains a
2N/A queries, one per line. Each entry in the file should be organized in
2N/A the same way they would be presented as queries to
2N/A <
span><
strong class="command">dig</
strong></
span> using the command-line interface.
2N/A The <
code class="option">-m</
code> option enables memory usage debugging.
2N/A If a non-standard port number is to be queried, the
2N/A <
code class="option">-p</
code> option is used. <
em class="parameter"><
code>port#</
code></
em> is
2N/A the port number that <
span><
strong class="command">dig</
strong></
span> will send its
2N/A instead of the standard DNS port number 53. This option would be used
2N/A to test a name server that has been configured to listen for queries
2N/A on a non-standard port number.
2N/A The <
code class="option">-4</
code> option forces <
span><
strong class="command">dig</
strong></
span>
2N/A use IPv4 query transport. The <
code class="option">-6</
code> option forces
2N/A <
span><
strong class="command">dig</
strong></
span> to only use IPv6 query transport.
2N/A The <
code class="option">-t</
code> option sets the query type to
2N/A <
em class="parameter"><
code>type</
code></
em>. It can be any valid query type
2N/A supported in BIND 9. The default query type is "A", unless the
2N/A <
code class="option">-x</
code> option is supplied to indicate a reverse lookup.
2N/A A zone transfer can be requested by specifying a type of AXFR. When
2N/A an incremental zone transfer (IXFR) is required,
2N/A <
em class="parameter"><
code>type</
code></
em> is set to <
code class="literal">ixfr=N</
code>.
2N/A The incremental zone transfer will contain the changes made to the zone
2N/A since the serial number in the zone's SOA record was
2N/A <
em class="parameter"><
code>N</
code></
em>.
2N/A The <
code class="option">-q</
code> option sets the query name to
2N/A <
em class="parameter"><
code>name</
code></
em>. This is useful to distinguish the
2N/A <
em class="parameter"><
code>name</
code></
em> from other arguments.
2N/A The <
code class="option">-v</
code> causes <
span><
strong class="command">dig</
strong></
span> to
2N/A print the version number and exit.
2N/A Reverse lookups — mapping addresses to names — are simplified by the
2N/A <
code class="option">-x</
code> option. <
em class="parameter"><
code>addr</
code></
em> is
2N/A address in dotted-decimal notation, or a colon-delimited IPv6 address.
2N/A When this option is used, there is no need to provide the
2N/A <
em class="parameter"><
code>name</
code></
em>, <
em class="parameter"><
code>class</
code></
em> and
2N/A <
em class="parameter"><
code>type</
code></
em> arguments. <
span><
strong class="command">dig</
strong></
span>
2N/A automatically performs a lookup for a name like
2N/A class to PTR and IN respectively. By default, IPv6 addresses are
2N/A looked up using nibble format under the
IP6.ARPA domain.
2N/A To use the older RFC1886 method using the
IP6.INT domain
2N/A specify the <
code class="option">-i</
code> option. Bit string labels (RFC2874)
2N/A are now experimental and are not attempted.
2N/A To sign the DNS queries sent by <
span><
strong class="command">dig</
strong></
span> and
2N/A responses using transaction signatures (TSIG), specify a TSIG key file
2N/A using the <
code class="option">-k</
code> option. You can also specify the TSIG
2N/A key itself on the command line using the <
code class="option">-y</
code> option;
2N/A <
em class="parameter"><
code>hmac</
code></
em> is the type of the TSIG, default HMAC-MD5,
2N/A <
em class="parameter"><
code>name</
code></
em> is the name of the TSIG key and
2N/A <
em class="parameter"><
code>key</
code></
em> is the actual key. The key is a
2N/A encoded string, typically generated by
2N/A <
span class="citerefentry"><
span class="refentrytitle">dnssec-keygen</
span>(8)</
span>.
2N/A Caution should be taken when using the <
code class="option">-y</
code> option on
2N/A multi-user systems as the key can be visible in the output from
2N/A <
span class="citerefentry"><
span class="refentrytitle">ps</
span>(1)</
span>
2N/A or in the shell's history file. When
2N/A using TSIG authentication with <
span><
strong class="command">dig</
strong></
span>, the name
2N/A server that is queried needs to know the key and algorithm that is
2N/A being used. In BIND, this is done by providing appropriate
2N/A <
span><
strong class="command">key</
strong></
span> and <
span><
strong class="command">server</
strong></
span> statements in
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2666852"></
a><
h2>QUERY OPTIONS</
h2>
2N/A<
p><
span><
strong class="command">dig</
strong></
span>
2N/A provides a number of query options which affect
2N/A the way in which lookups are made and the results displayed. Some of
2N/A these set or reset flag bits in the query header, some determine which
2N/A sections of the answer get printed, and others determine the timeout
2N/A and retry strategies.
2N/A Each query option is identified by a keyword preceded by a plus sign
2N/A (<
code class="literal">+</
code>). Some keywords set or reset an
2N/A option. These may be preceded
2N/A by the string <
code class="literal">no</
code> to negate the meaning of
2N/A keywords assign values to options like the timeout interval. They
2N/A have the form <
code class="option">+keyword=value</
code>.
2N/A The query options are:
2N/A<
div class="variablelist"><
dl>
2N/A<
dt><
span class="term"><
code class="option">+[no]aaflag</
code></
span></
dt>
2N/A A synonym for <
em class="parameter"><
code>+[no]aaonly</
code></
em>.
2N/A<
dt><
span class="term"><
code class="option">+[no]aaonly</
code></
span></
dt>
2N/A Sets the "aa" flag in the query.
2N/A<
dt><
span class="term"><
code class="option">+[no]additional</
code></
span></
dt>
2N/A Display [do not display] the additional section of a
2N/A reply. The default is to display it.
2N/A<
dt><
span class="term"><
code class="option">+[no]adflag</
code></
span></
dt>
2N/A Set [do not set] the AD (authentic data) bit in the
2N/A query. This requests the server to return whether
2N/A all of the answer and authority sections have all
2N/A been validated as secure according to the security
2N/A policy of the server. AD=1 indicates that all records
2N/A have been validated as secure and the answer is not
2N/A from a OPT-OUT range. AD=0 indicate that some part
2N/A of the answer was insecure or not validated. This
2N/A bit is set by default.
2N/A<
dt><
span class="term"><
code class="option">+[no]all</
code></
span></
dt>
2N/A Set or clear all display flags.
2N/A<
dt><
span class="term"><
code class="option">+[no]answer</
code></
span></
dt>
2N/A Display [do not display] the answer section of a
2N/A reply. The default is to display it.
2N/A<
dt><
span class="term"><
code class="option">+[no]authority</
code></
span></
dt>
2N/A Display [do not display] the authority section of a
2N/A reply. The default is to display it.
2N/A<
dt><
span class="term"><
code class="option">+[no]besteffort</
code></
span></
dt>
2N/A Attempt to display the contents of messages which are
2N/A malformed. The default is to not display malformed
2N/A<
dt><
span class="term"><
code class="option">+bufsize=B</
code></
span></
dt>
2N/A Set the UDP message buffer size advertised using EDNS0
2N/A to <
em class="parameter"><
code>B</
code></
em> bytes. The maximum and
2N/A minimum sizes of this buffer are 65535 and 0 respectively.
2N/A Values outside this range are rounded up or down
2N/A appropriately. Values other than zero will cause a
2N/A EDNS query to be sent.
2N/A<
dt><
span class="term"><
code class="option">+[no]cdflag</
code></
span></
dt>
2N/A Set [do not set] the CD (checking disabled) bit in
2N/A the query. This requests the server to not perform
2N/A DNSSEC validation of responses.
2N/A<
dt><
span class="term"><
code class="option">+[no]cl</
code></
span></
dt>
2N/A Display [do not display] the CLASS when printing the
2N/A<
dt><
span class="term"><
code class="option">+[no]cmd</
code></
span></
dt>
2N/A Toggles the printing of the initial comment in the
2N/A output identifying the version of <
span><
strong class="command">dig</
strong></
span>
2N/A and the query options that have been applied. This
2N/A comment is printed by default.
2N/A<
dt><
span class="term"><
code class="option">+[no]comments</
code></
span></
dt>
2N/A Toggle the display of comment lines in the output.
2N/A The default is to print comments.
2N/A<
dt><
span class="term"><
code class="option">+[no]crypto</
code></
span></
dt>
2N/A Toggle the display of cryptographic fields in DNSSEC
2N/A records. The contents of these field are unnecessary
2N/A to debug most DNSSEC validation failures and removing
2N/A them makes it easier to see the common failures. The
2N/A default is to display the fields. When omitted they
2N/A are replaced by the string "[omitted]" or in the
2N/A DNSKEY case the key id is displayed as the replacement,
2N/A<
dt><
span class="term"><
code class="option">+[no]defname</
code></
span></
dt>
2N/A Deprecated, treated as a synonym for
2N/A <
em class="parameter"><
code>+[no]search</
code></
em>
2N/A<
dt><
span class="term"><
code class="option">+[no]dnssec</
code></
span></
dt>
2N/A Requests DNSSEC records be sent by setting the DNSSEC
2N/A OK bit (DO) in the OPT record in the additional section
2N/A<
dt><
span class="term"><
code class="option">+domain=somename</
code></
span></
dt>
2N/A Set the search list to contain the single domain
2N/A <
em class="parameter"><
code>somename</
code></
em>, as if specified in
2N/A a <
span><
strong class="command">domain</
strong></
span> directive in
2N/A search list processing as if the
2N/A <
em class="parameter"><
code>+search</
code></
em> option were given.
2N/A<
dt><
span class="term"><
code class="option">+dscp=value</
code></
span></
dt>
2N/A Set the DSCP code point to be used when sending the
2N/A query. Valid DSCP code points are in the range
2N/A [0..63]. By default no code point is explicitly set.
2N/A<
dt><
span class="term"><
code class="option">+[no]edns[=#]</
code></
span></
dt>
2N/A Specify the EDNS version to query with. Valid values
2N/A are 0 to 255. Setting the EDNS version will cause
2N/A a EDNS query to be sent. <
code class="option">+noedns</
code>
2N/A clears the remembered EDNS version. EDNS is set to
2N/A<
dt><
span class="term"><
code class="option">+[no]ednsflags[=#]</
code></
span></
dt>
2N/A Set the must-be-zero EDNS flags bits (Z bits) to the
2N/A specified value. Decimal, hex and octal encodings are
2N/A accepted. Setting a named flag (
e.g. DO) will silently be
2N/A ignored. By default, no Z bits are set.
2N/A<
dt><
span class="term"><
code class="option">+[no]ednsopt[=code[:value]]</
code></
span></
dt>
2N/A Specify EDNS option with code point <
code class="option">code</
code>
2N/A and optionally payload of <
code class="option">value</
code> as a
2N/A hexadecimal string. <
code class="option">+noednsopt</
code>
2N/A clears the EDNS options to be sent.
2N/A<
dt><
span class="term"><
code class="option">+[no]expire</
code></
span></
dt>
2N/A Send an EDNS Expire option.
2N/A<
dt><
span class="term"><
code class="option">+[no]fail</
code></
span></
dt>
2N/A Do not try the next server if you receive a SERVFAIL.
2N/A The default is to not try the next server which is
2N/A the reverse of normal stub resolver behavior.
2N/A<
dt><
span class="term"><
code class="option">+[no]identify</
code></
span></
dt>
2N/A Show [or do not show] the IP address and port number
2N/A that supplied the answer when the
2N/A <
em class="parameter"><
code>+short</
code></
em> option is enabled. If
2N/A short form answers are requested, the default is not
2N/A to show the source address and port number of the
2N/A server that provided the answer.
2N/A<
dt><
span class="term"><
code class="option">+[no]ignore</
code></
span></
dt>
2N/A Ignore truncation in UDP responses instead of retrying
2N/A with TCP. By default, TCP retries are performed.
2N/A<
dt><
span class="term"><
code class="option">+[no]keepopen</
code></
span></
dt>
2N/A Keep the TCP socket open between queries and reuse
2N/A it rather than creating a new TCP socket for each
2N/A lookup. The default is <
code class="option">+nokeepopen</
code>.
2N/A<
dt><
span class="term"><
code class="option">+[no]multiline</
code></
span></
dt>
2N/A Print records like the SOA records in a verbose
2N/A multi-line format with human-readable comments. The
2N/A default is to print each record on a single line, to
2N/A facilitate machine parsing of the <
span><
strong class="command">dig</
strong></
span>
2N/A<
dt><
span class="term"><
code class="option">+ndots=D</
code></
span></
dt>
2N/A Set the number of dots that have to appear in
2N/A <
em class="parameter"><
code>name</
code></
em> to <
em class="parameter"><
code>D</
code></
em>
2N/A for it to be considered absolute. The default value
2N/A is that defined using the ndots statement in
2N/A ndots statement is present. Names with fewer dots
2N/A are interpreted as relative names and will be searched
2N/A for in the domains listed in the <
code class="option">search</
code>
2N/A or <
code class="option">domain</
code> directive in
2N/A<
dt><
span class="term"><
code class="option">+[no]nsid</
code></
span></
dt>
2N/A Include an EDNS name server ID request when sending
2N/A<
dt><
span class="term"><
code class="option">+[no]nssearch</
code></
span></
dt>
2N/A When this option is set, <
span><
strong class="command">dig</
strong></
span>
2N/A attempts to find the authoritative name servers for
2N/A the zone containing the name being looked up and
2N/A display the SOA record that each name server has for
2N/A<
dt><
span class="term"><
code class="option">+[no]onesoa</
code></
span></
dt>
2N/A Print only one (starting) SOA record when performing
2N/A an AXFR. The default is to print both the starting
2N/A and ending SOA records.
2N/A<
dt><
span class="term"><
code class="option">+[no]qr</
code></
span></
dt>
2N/A Print [do not print] the query as it is sent. By
2N/A default, the query is not printed.
2N/A<
dt><
span class="term"><
code class="option">+[no]question</
code></
span></
dt>
2N/A Print [do not print] the question section of a query
2N/A when an answer is returned. The default is to print
2N/A the question section as a comment.
2N/A<
dt><
span class="term"><
code class="option">+[no]recurse</
code></
span></
dt>
2N/A Toggle the setting of the RD (recursion desired) bit
2N/A in the query. This bit is set by default, which means
2N/A <
span><
strong class="command">dig</
strong></
span> normally sends recursive
2N/A queries. Recursion is automatically disabled when
2N/A the <
em class="parameter"><
code>+nssearch</
code></
em> or
2N/A <
em class="parameter"><
code>+trace</
code></
em> query options are used.
2N/A<
dt><
span class="term"><
code class="option">+retry=T</
code></
span></
dt>
2N/A Sets the number of times to retry UDP queries to
2N/A server to <
em class="parameter"><
code>T</
code></
em> instead of the
2N/A default, 2. Unlike <
em class="parameter"><
code>+tries</
code></
em>,
2N/A this does not include the initial query.
2N/A<
dt><
span class="term"><
code class="option">+[no]rrcomments</
code></
span></
dt>
2N/A Toggle the display of per-record comments in the
2N/A output (for example, human-readable key information
2N/A about DNSKEY records). The default is not to print
2N/A record comments unless multiline mode is active.
2N/A<
dt><
span class="term"><
code class="option">+[no]search</
code></
span></
dt>
2N/A Use [do not use] the search list defined by the
2N/A searchlist or domain directive in
2N/A list is not used by default.
2N/A<
dt><
span class="term"><
code class="option">+[no]short</
code></
span></
dt>
2N/A Provide a terse answer. The default is to print the
2N/A answer in a verbose form.
2N/A<
dt><
span class="term"><
code class="option">+[no]showsearch</
code></
span></
dt>
2N/A Perform [do not perform] a search showing intermediate
2N/A<
dt><
span class="term"><
code class="option">+[no]sigchase</
code></
span></
dt>
2N/A Chase DNSSEC signature chains. Requires dig be
2N/A compiled with -DDIG_SIGCHASE.
2N/A<
dt><
span class="term"><
code class="option">+[no]sit[<
span class="optional">=####</
span>]</
code></
span></
dt>
2N/A Send a Source Identity Token EDNS option, with optional
2N/A value. Replaying a SIT from a previous response will
2N/A allow the server to identify a previous client. The
2N/A default is <
code class="option">+nosit</
code>. Currently using
2N/A experimental value 65001 for the option code.
2N/A<
dt><
span class="term"><
code class="option">+split=W</
code></
span></
dt>
2N/A Split long hex- or base64-formatted fields in resource
2N/A records into chunks of <
em class="parameter"><
code>W</
code></
em>
2N/A characters (where <
em class="parameter"><
code>W</
code></
em> is rounded
2N/A up to the nearest multiple of 4).
2N/A <
em class="parameter"><
code>+nosplit</
code></
em> or
2N/A <
em class="parameter"><
code>+split=0</
code></
em> causes fields not to
2N/A be split at all. The default is 56 characters, or
2N/A 44 characters when multiline mode is active.
2N/A<
dt><
span class="term"><
code class="option">+[no]stats</
code></
span></
dt>
2N/A This query option toggles the printing of statistics:
2N/A when the query was made, the size of the reply and
2N/A so on. The default behavior is to print the query
2N/A<
dt><
span class="term"><
code class="option">+[no]subnet=
addr/
prefix</
code></
span></
dt>
2N/A Send an EDNS Client Subnet option with the specified
2N/A IP address or network prefix.
2N/A<
dt><
span class="term"><
code class="option">+[no]tcp</
code></
span></
dt>
2N/A Use [do not use] TCP when querying name servers. The
2N/A default behavior is to use UDP unless an
2N/A <
code class="literal">ixfr=N</
code> query is requested, in which
2N/A case the default is TCP. AXFR queries always use
2N/A<
dt><
span class="term"><
code class="option">+time=T</
code></
span></
dt>
2N/A Sets the timeout for a query to
2N/A <
em class="parameter"><
code>T</
code></
em> seconds. The default
2N/A timeout is 5 seconds.
2N/A An attempt to set <
em class="parameter"><
code>T</
code></
em> to less
2N/A in a query timeout of 1 second being applied.
2N/A<
dt><
span class="term"><
code class="option">+[no]topdown</
code></
span></
dt>
2N/A When chasing DNSSEC signature chains perform a top-down
2N/A validation. Requires dig be compiled with -DDIG_SIGCHASE.
2N/A<
dt><
span class="term"><
code class="option">+[no]trace</
code></
span></
dt>
2N/A Toggle tracing of the delegation path from the root
2N/A name servers for the name being looked up. Tracing
2N/A is disabled by default. When tracing is enabled,
2N/A <
span><
strong class="command">dig</
strong></
span> makes iterative queries to
2N/A resolve the name being looked up. It will follow
2N/A referrals from the root servers, showing the answer
2N/A from each server that was used to resolve the lookup.
2N/A <
span><
strong class="command">+dnssec</
strong></
span> is also set when +trace
2N/A is set to better emulate the default queries from a
2N/A<
dt><
span class="term"><
code class="option">+tries=T</
code></
span></
dt>
2N/A Sets the number of times to try UDP queries to server
2N/A to <
em class="parameter"><
code>T</
code></
em> instead of the default,
2N/A 3. If <
em class="parameter"><
code>T</
code></
em> is less than or equal
2N/A to zero, the number of tries is silently rounded up
2N/A<
dt><
span class="term"><
code class="option">+trusted-key=####</
code></
span></
dt>
2N/A Specifies a file containing trusted keys to be used
2N/A with <
code class="option">+sigchase</
code>. Each DNSKEY record
2N/A must be on its own line.
2N/A If not specified, <
span><
strong class="command">dig</
strong></
span> will look
2N/A Requires dig be compiled with -DDIG_SIGCHASE.
2N/A<
dt><
span class="term"><
code class="option">+[no]ttlid</
code></
span></
dt>
2N/A Display [do not display] the TTL when printing the
2N/A<
dt><
span class="term"><
code class="option">+[no]ttlunits</
code></
span></
dt>
2N/A Display [do not display] the TTL in friendly human-readable
2N/A time units of "s", "m", "h", "d", and "w", representing
2N/A seconds, minutes, hours, days and weeks. Implies +ttlid.
2N/A<
dt><
span class="term"><
code class="option">+[no]vc</
code></
span></
dt>
2N/A Use [do not use] TCP when querying name servers. This
2N/A alternate syntax to <
em class="parameter"><
code>+[no]tcp</
code></
em>
2N/A is provided for backwards compatibility. The "vc"
2N/A stands for "virtual circuit".
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2668216"></
a><
h2>MULTIPLE QUERIES</
h2>
2N/A The BIND 9 implementation of <
span><
strong class="command">dig </
strong></
span>
2N/A specifying multiple queries on the command line (in addition to
2N/A supporting the <
code class="option">-f</
code> batch file option). Each of those
2N/A queries can be supplied with its own set of flags, options and query
2N/A In this case, each <
em class="parameter"><
code>query</
code></
em> argument
2N/A individual query in the command-line syntax described above. Each
2N/A consists of any of the standard options and flags, the name to be
2N/A looked up, an optional query type and class and any query options that
2N/A should be applied to that query.
2N/A A global set of query options, which should be applied to all queries,
2N/A can also be supplied. These global query options must precede the
2N/A first tuple of name, class, type, options, flags, and query options
2N/A supplied on the command line. Any global query options (except
2N/A the <
code class="option">+[no]cmd</
code> option) can be
2N/A overridden by a query-specific set of query options. For example:
2N/A<
pre class="programlisting">
2N/A shows how <
span><
strong class="command">dig</
strong></
span> could be used from the
2N/A to make three lookups: an ANY query for <
code class="literal">
www.isc.org</
code>, a
2N/A reverse lookup of 127.0.0.1 and a query for the NS records of
2N/A A global query option of <
em class="parameter"><
code>+qr</
code></
em> is
2N/A that <
span><
strong class="command">dig</
strong></
span> shows the initial query it made
2N/A lookup. The final query has a local query option of
2N/A <
em class="parameter"><
code>+noqr</
code></
em> which means that <
span><
strong class="command">dig</
strong></
span>
2N/A will not print the initial query when it looks up the NS records for
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2668370"></
a><
h2>IDN SUPPORT</
h2>
2N/A If <
span><
strong class="command">dig</
strong></
span> has been built with IDN (internationalized
2N/A domain name) support, it can accept and display non-ASCII domain names.
2N/A <
span><
strong class="command">dig</
strong></
span> appropriately converts character encoding of
2N/A domain name before sending a request to DNS server or displaying a
2N/A reply from the server.
2N/A If you'd like to turn off the IDN support for some reason, defines
2N/A the <
code class="envar">IDN_DISABLE</
code> environment variable.
2N/A The IDN support is disabled if the variable is set when
2N/A <
span><
strong class="command">dig</
strong></
span> runs.
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2668398"></
a><
h2>FILES</
h2>
2N/A<
p><
code class="filename">${HOME}/.digrc</
code>
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2668420"></
a><
h2>SEE ALSO</
h2>
2N/A<
p><
span class="citerefentry"><
span class="refentrytitle">host</
span>(1)</
span>,
2N/A <
span class="citerefentry"><
span class="refentrytitle">named</
span>(8)</
span>,
2N/A <
span class="citerefentry"><
span class="refentrytitle">dnssec-keygen</
span>(8)</
span>,
2N/A <
em class="citetitle">RFC1035</
em>.
2N/A<
div class="refsect1" lang="en">
2N/A<
a name="id2668457"></
a><
h2>BUGS</
h2>
2N/A There are probably too many query options.
2N/A<
div class="navfooter">
2N/A<
table width="100%" summary="Navigation footer">
2N/A<
td width="40%" align="left">
2N/A<
td width="40%" align="left" valign="top">Manual pages�</
td>
2N/A<
td width="20%" align="center"><
a accesskey="h" href="Bv9ARM.html">Home</
a></
td>
2N/A<
td width="40%" align="right" valign="top">�host</
td>
2N/A<
p style="text-align: center;">BIND Version 9.11</
p>