man.dig.html revision 6100dfd774ab9b4040b6f348ef1de01bc902ae07
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC")
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - Permission to use, copy, modify, and/or distribute this software for any
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - purpose with or without fee is hereby granted, provided that the above
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - copyright notice and this permission notice appear in all copies.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync - PERFORMANCE OF THIS SOFTWARE.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<!-- $Id: man.dig.html,v 1.171 2011/05/18 01:14:42 tbox Exp $ -->
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<p><span><strong class="command">dig</strong></span>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync (domain information groper) is a flexible tool
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync for interrogating DNS name servers. It performs DNS lookups and
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync displays the answers that are returned from the name server(s) that
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync troubleshoot DNS problems because of its flexibility, ease of use and
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync clarity of output. Other lookup tools tend to have less functionality
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync than <span><strong class="command">dig</strong></span>.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Although <span><strong class="command">dig</strong></span> is normally used with
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync command-line
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync arguments, it also has a batch mode of operation for reading lookup
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync requests from a file. A brief summary of its command-line arguments
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync and options is printed when the <code class="option">-h</code> option is given.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Unlike earlier versions, the BIND 9 implementation of
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync command line.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Unless it is told to query a specific name server,
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">dig</strong></span> will try each of the servers listed
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync When no command line arguments or options are given,
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <code class="filename">${HOME}/.digrc</code>. This file is read and
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync any options in it
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync are applied before the command line arguments.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The IN and CH class names overlap with the IN and CH top level
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync domains names. Either use the <code class="option">-t</code> and
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <code class="option">-c</code> options to specify the type and class,
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync use the <code class="option">-q</code> the specify the domain name, or
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync use "IN." and "CH." when looking up these top level domains.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync A typical invocation of <span><strong class="command">dig</strong></span> looks like:
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<pre class="programlisting"> dig @server name type </pre>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="constant">server</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync is the name or IP address of the name server to query. This can
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync address in dotted-decimal notation or an IPv6
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync address in colon-delimited notation. When the supplied
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>server</code></em> argument is a
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">dig</strong></span> resolves that name before
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync querying that name
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync server. If no <em class="parameter"><code>server</code></em>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync argument is provided,
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync and queries the name servers listed there. The reply from the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync server that responds is displayed.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="constant">name</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync is the name of the resource record that is to be looked up.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="constant">type</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync indicates what type of query is required —
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync ANY, A, MX, SIG, etc.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>type</code></em> can be any valid query
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync type. If no
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>type</code></em> argument is supplied,
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">dig</strong></span> will perform a lookup for an
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The <code class="option">-b</code> option sets the source IP address of the query
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync to <em class="parameter"><code>address</code></em>. This must be a valid
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync one of the host's network interfaces or "0.0.0.0" or "::". An optional
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync may be specified by appending "#<port>"
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The default query class (IN for internet) is overridden by the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync class, such as HS for Hesiod records or CH for Chaosnet records.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync in batch mode by reading a list of lookup requests to process from the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync file <em class="parameter"><code>filename</code></em>. The file contains a
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync queries, one per line. Each entry in the file should be organized in
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync the same way they would be presented as queries to
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">dig</strong></span> using the command-line interface.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The <code class="option">-m</code> option enables memory usage debugging.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync If a non-standard port number is to be queried, the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync the port number that <span><strong class="command">dig</strong></span> will send its
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync instead of the standard DNS port number 53. This option would be used
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync to test a name server that has been configured to listen for queries
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync on a non-standard port number.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync use IPv4 query transport. The <code class="option">-6</code> option forces
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The <code class="option">-t</code> option sets the query type to
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>type</code></em>. It can be any valid query type
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync supported in BIND 9. The default query type is "A", unless the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <code class="option">-x</code> option is supplied to indicate a reverse lookup.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync A zone transfer can be requested by specifying a type of AXFR. When
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync an incremental zone transfer (IXFR) is required,
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The incremental zone transfer will contain the changes made to the zone
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync since the serial number in the zone's SOA record was
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The <code class="option">-q</code> option sets the query name to
f6a7a5ea5c6903d1a5632f2febac4e489bd8beddvboxsync <em class="parameter"><code>name</code></em>. This useful do distinguish the
f6a7a5ea5c6903d1a5632f2febac4e489bd8beddvboxsync <em class="parameter"><code>name</code></em> from other arguments.
f6a7a5ea5c6903d1a5632f2febac4e489bd8beddvboxsync Reverse lookups — mapping addresses to names — are simplified by the
f6a7a5ea5c6903d1a5632f2febac4e489bd8beddvboxsync <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
f6a7a5ea5c6903d1a5632f2febac4e489bd8beddvboxsync address in dotted-decimal notation, or a colon-delimited IPv6 address.
f6a7a5ea5c6903d1a5632f2febac4e489bd8beddvboxsync When this option is used, there is no need to provide the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync automatically performs a lookup for a name like
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync query type and
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync class to PTR and IN respectively. By default, IPv6 addresses are
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync looked up using nibble format under the IP6.ARPA domain.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync To use the older RFC1886 method using the IP6.INT domain
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync are now experimental and are not attempted.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync responses using transaction signatures (TSIG), specify a TSIG key file
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync using the <code class="option">-k</code> option. You can also specify the TSIG
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync key itself on the command line using the <code class="option">-y</code> option;
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>name</code></em> is the name of the TSIG key and
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>key</code></em> is the actual key. The key is a
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync encoded string, typically generated by
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Caution should be taken when using the <code class="option">-y</code> option on
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync multi-user systems as the key can be visible in the output from
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync or in the shell's history file. When
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync server that is queried needs to know the key and algorithm that is
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync being used. In BIND, this is done by providing appropriate
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<p><span><strong class="command">dig</strong></span>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync provides a number of query options which affect
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync the way in which lookups are made and the results displayed. Some of
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync these set or reset flag bits in the query header, some determine which
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync sections of the answer get printed, and others determine the timeout
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync and retry strategies.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Each query option is identified by a keyword preceded by a plus sign
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync (<code class="literal">+</code>). Some keywords set or reset an
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync option. These may be preceded
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync by the string <code class="literal">no</code> to negate the meaning of
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync that keyword. Other
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync keywords assign values to options like the timeout interval. They
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync have the form <code class="option">+keyword=value</code>.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The query options are:
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Use [do not use] TCP when querying name servers. The default
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync behavior is to use UDP unless an AXFR or IXFR query is
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync requested, in
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync which case a TCP connection is used.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Use [do not use] TCP when querying name servers. This alternate
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync syntax to <em class="parameter"><code>+[no]tcp</code></em> is
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync provided for backwards
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync compatibility. The "vc" stands for "virtual circuit".
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Ignore truncation in UDP responses instead of retrying with TCP.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync default, TCP retries are performed.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Set the search list to contain the single domain
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>somename</code></em>, as if specified in
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <span><strong class="command">domain</strong></span> directive in
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <code class="filename">/etc/resolv.conf</code>, and enable
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync search list
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync processing as if the <em class="parameter"><code>+search</code></em>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync option were given.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]search</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Use [do not use] the search list defined by the searchlist or
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync directive in <code class="filename">resolv.conf</code> (if
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync The search list is not used by default.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Perform [do not perform] a search showing intermediate
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Sets the "aa" flag in the query.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Set [do not set] the AD (authentic data) bit in the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync query. This requests the server to return whether
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync all of the answer and authority sections have all
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync been validated as secure according to the security
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync policy of the server. AD=1 indicates that all records
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync have been validated as secure and the answer is not
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync from a OPT-OUT range. AD=0 indicate that some part
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync of the answer was insecure or not validated.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Set [do not set] the CD (checking disabled) bit in the query.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync requests the server to not perform DNSSEC validation of
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Display [do not display] the CLASS when printing the record.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Display [do not display] the TTL when printing the record.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Toggle the setting of the RD (recursion desired) bit in the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync This bit is set by default, which means <span><strong class="command">dig</strong></span>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync normally sends recursive queries. Recursion is automatically
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync when the <em class="parameter"><code>+nssearch</code></em> or
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync <em class="parameter"><code>+trace</code></em> query options are
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync When this option is set, <span><strong class="command">dig</strong></span>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync attempts to find the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync authoritative name servers for the zone containing the name
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync looked up and display the SOA record that each name server has
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Toggle tracing of the delegation path from the root name servers
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync the name being looked up. Tracing is disabled by default. When
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync tracing is enabled, <span><strong class="command">dig</strong></span> makes
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync iterative queries to
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync resolve the name being looked up. It will follow referrals from
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync root servers, showing the answer from each server that was used
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync resolve the lookup.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Toggles the printing of the initial comment in the output
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync identifying
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync the version of <span><strong class="command">dig</strong></span> and the query
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync options that have
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync been applied. This comment is printed by default.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]short</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Provide a terse answer. The default is to print the answer in a
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync verbose form.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Show [or do not show] the IP address and port number that
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync supplied the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync answer when the <em class="parameter"><code>+short</code></em> option
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync is enabled. If
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync short form answers are requested, the default is not to show the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync source address and port number of the server that provided the
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Toggle the display of comment lines in the output. The default
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync is to print comments.
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync Toggle the display of per-record comments in the output (for
13493ab7596e827b8d0caab2c89e635dd65f78f9vboxsync example, human-readable key information about DNSKEY records).
<em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be