man.dig.html revision 7e3f5fbcf871f22707e7da5e4c69573a4fdc64b5
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - Permission to use, copy, modify, and/or distribute this software for any
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - purpose with or without fee is hereby granted, provided that the above
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - copyright notice and this permission notice appear in all copies.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews - PERFORMANCE OF THIS SOFTWARE.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<!-- $Id$ -->
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<link rel="prev" href="Bv9ARM.ch13.html" title="Manual pages">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<link rel="next" href="man.host.html" title="host">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<table width="100%" summary="Navigation header">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<tr><th colspan="3" align="center">dig</th></tr>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<th width="60%" align="center">Manual pages</th>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<a name="man.dig"></a><div class="titlepage"></div>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<p><span><strong class="command">dig</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews (domain information groper) is a flexible tool
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews for interrogating DNS name servers. It performs DNS lookups and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews displays the answers that are returned from the name server(s) that
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews troubleshoot DNS problems because of its flexibility, ease of use and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews clarity of output. Other lookup tools tend to have less functionality
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews than <span><strong class="command">dig</strong></span>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Although <span><strong class="command">dig</strong></span> is normally used with
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews command-line
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews arguments, it also has a batch mode of operation for reading lookup
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews requests from a file. A brief summary of its command-line arguments
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and options is printed when the <code class="option">-h</code> option is given.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Unlike earlier versions, the BIND 9 implementation of
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews command line.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Unless it is told to query a specific name server,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> will try each of the servers listed in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews are found, <span><strong class="command">dig</strong></span> will send the query to the local
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews When no command line arguments or options are given,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">${HOME}/.digrc</code>. This file is read and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews any options in it
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews are applied before the command line arguments.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The IN and CH class names overlap with the IN and CH top level
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews domain names. Either use the <code class="option">-t</code> and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="option">-c</code> options to specify the type and class,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews use the <code class="option">-q</code> the specify the domain name, or
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews use "IN." and "CH." when looking up these top level domains.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews A typical invocation of <span><strong class="command">dig</strong></span> looks like:
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<pre class="programlisting"> dig @server name type </pre>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="constant">server</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is the name or IP address of the name server to query. This
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews can be an IPv4 address in dotted-decimal notation or an IPv6
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews address in colon-delimited notation. When the supplied
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>server</code></em> argument is a hostname,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> resolves that name before querying
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews that name server.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews If no <em class="parameter"><code>server</code></em> argument is
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews provided, <span><strong class="command">dig</strong></span> consults
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">/etc/resolv.conf</code>; if an
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews address is found there, it queries the name server at
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews that address. If either of the <code class="option">-4</code> or
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="option">-6</code> options are in use, then
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews only addresses for the corresponding transport
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews will be tried. If no usable addresses are found,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> will send the query to the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews local host. The reply from the name server that
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews responds is displayed.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="constant">name</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is the name of the resource record that is to be looked up.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="constant">type</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews indicates what type of query is required —
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews ANY, A, MX, SIG, etc.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>type</code></em> can be any valid query
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>type</code></em> argument is supplied,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> will perform a lookup for an
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Use IPv4 only.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Use IPv6 only.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-b <em class="replaceable"><code>address[<span class="optional">#port</span>]</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set the source IP address of the query.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The <em class="parameter"><code>address</code></em> must be a valid address on
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews one of the host's network interfaces, or "0.0.0.0" or "::". An
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews optional port may be specified by appending "#<port>"
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set the query class. The
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews default <em class="parameter"><code>class</code></em> is IN; other classes
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews are HS for Hesiod records or CH for Chaosnet records.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Batch mode: <span><strong class="command">dig</strong></span> reads a list of lookup
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews requests to process from the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews given <em class="parameter"><code>file</code></em>. Each line in the file
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews should be organized in the same way they would be
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews presented as queries to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> using the command-line interface.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Do reverse IPv6 lookups using the obsolete RFC1886 IP6.INT
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews domain, which is no longer in use. Obsolete bit string
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews label queries (RFC2874) are not attempted.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-k <em class="replaceable"><code>keyfile</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Sign queries using TSIG using a key read from the given file.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Key files can be generated using
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span class="citerefentry"><span class="refentrytitle">tsig-keygen</span>(8)</span>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews When using TSIG authentication with <span><strong class="command">dig</strong></span>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the name server that is queried needs to know the key and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews algorithm that is being used. In BIND, this is done by
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews providing appropriate <span><strong class="command">key</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and <span><strong class="command">server</strong></span> statements in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Enable memory usage debugging.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Send the query to a non-standard port on the server,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews instead of the defaut port 53. This option would be used
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to test a name server that has been configured to listen
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews for queries on a non-standard port number.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-q <em class="replaceable"><code>name</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The domain name to query. This is useful to distinguish
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the <em class="parameter"><code>name</code></em> from other arguments.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The resource record type to query. It can be any valid query type
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews supported in BIND 9. The default query type is "A", unless the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="option">-x</code> option is supplied to indicate a reverse lookup.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews A zone transfer can be requested by specifying a type of AXFR. When
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews an incremental zone transfer (IXFR) is required, set the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>type</code></em> to <code class="literal">ixfr=N</code>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The incremental zone transfer will contain the changes
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews made to the zone since the serial number in the zone's SOA
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Print the version number and exit.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-x <em class="replaceable"><code>addr</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Simplified reverse lookups, for mapping addresses to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews names. The <em class="parameter"><code>addr</code></em> is an IPv4 address
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews in dotted-decimal notation, or a colon-delimited IPv6
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews address. When the <code class="option">-x</code> is used, there is no
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews need to provide
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and <em class="parameter"><code>type</code></em>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews arguments. <span><strong class="command">dig</strong></span> automatically performs a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews lookup for a name like
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="literal">94.2.0.192.in-addr.arpa</code> and sets the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews query type and class to PTR and IN respectively. IPv6
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews addresses are looked up using nibble format under the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews IP6.ARPA domain (but see also the <code class="option">-i</code>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Sign queries using TSIG with the given authentication key.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>keyname</code></em> is the name of the key, and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews valid choices are <code class="literal">hmac-md5</code>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is not specified, the default is <code class="literal">hmac-md5</code>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews NOTE: You should use the <code class="option">-k</code> option and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews avoid the <code class="option">-y</code> option, because
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews with <code class="option">-y</code> the shared secret is supplied as
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews a command line argument in clear text. This may be visible
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews in the output from
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews or in a history file maintained by the user's shell.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<p><span><strong class="command">dig</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews provides a number of query options which affect
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the way in which lookups are made and the results displayed. Some of
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews these set or reset flag bits in the query header, some determine which
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews sections of the answer get printed, and others determine the timeout
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and retry strategies.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Each query option is identified by a keyword preceded by a plus sign
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews (<code class="literal">+</code>). Some keywords set or reset an
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews option. These may be preceded
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews by the string <code class="literal">no</code> to negate the meaning of
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews that keyword. Other
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews keywords assign values to options like the timeout interval. They
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews have the form <code class="option">+keyword=value</code>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Keywords may be abbreviated, provided the abbreviation is
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews unambiguous; for example, <code class="literal">+cd</code> is equivalent
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The query options are:
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Sets the "aa" flag in the query.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Display [do not display] the additional section of a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews reply. The default is to display it.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set [do not set] the AD (authentic data) bit in the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews query. This requests the server to return whether
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews all of the answer and authority sections have all
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews been validated as secure according to the security
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews policy of the server. AD=1 indicates that all records
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews have been validated as secure and the answer is not
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews from a OPT-OUT range. AD=0 indicate that some part
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews of the answer was insecure or not validated. This
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews bit is set by default.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]all</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set or clear all display flags.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Display [do not display] the answer section of a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews reply. The default is to display it.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Display [do not display] the authority section of a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews reply. The default is to display it.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]badcookie</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Retry lookup with the new server cookie if a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews BADCOOKIE response is received.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Attempt to display the contents of messages which are
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews malformed. The default is to not display malformed
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set the UDP message buffer size advertised using EDNS0
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to <em class="parameter"><code>B</code></em> bytes. The maximum and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews minimum sizes of this buffer are 65535 and 0 respectively.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Values outside this range are rounded up or down
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews appropriately. Values other than zero will cause a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews EDNS query to be sent.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set [do not set] the CD (checking disabled) bit in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the query. This requests the server to not perform
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews DNSSEC validation of responses.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]class</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Display [do not display] the CLASS when printing the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Toggles the printing of the initial comment in the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews output identifying the version of <span><strong class="command">dig</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and the query options that have been applied. This
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews comment is printed by default.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Toggle the display of comment lines in the output.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The default is to print comments.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]cookie[<span class="optional">=####</span>]</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Send a COOKIE EDNS option, with optional
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews value. Replaying a COOKIE from a previous response will
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews allow the server to identify a previous client. The
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews default is <code class="option">+cookie</code>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">+cookie</strong></span> is also set when +trace
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is set to better emulate the default queries from a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Toggle the display of cryptographic fields in DNSSEC
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews records. The contents of these field are unnecessary
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to debug most DNSSEC validation failures and removing
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews them makes it easier to see the common failures. The
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews default is to display the fields. When omitted they
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews are replaced by the string "[omitted]" or in the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews DNSKEY case the key id is displayed as the replacement,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews e.g. "[ key id = value ]".
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Deprecated, treated as a synonym for
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>+[no]search</code></em>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Requests DNSSEC records be sent by setting the DNSSEC
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews OK bit (DO) in the OPT record in the additional section
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews of the query.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set the search list to contain the single domain
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>somename</code></em>, as if specified in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews a <span><strong class="command">domain</strong></span> directive in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">/etc/resolv.conf</code>, and enable
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews search list processing as if the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>+search</code></em> option were given.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set the DSCP code point to be used when sending the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews query. Valid DSCP code points are in the range
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews [0..63]. By default no code point is explicitly set.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Specify the EDNS version to query with. Valid values
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews are 0 to 255. Setting the EDNS version will cause
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews a EDNS query to be sent. <code class="option">+noedns</code>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews clears the remembered EDNS version. EDNS is set to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews 0 by default.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set the must-be-zero EDNS flags bits (Z bits) to the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews specified value. Decimal, hex and octal encodings are
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews accepted. Setting a named flag (e.g. DO) will silently be
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews ignored. By default, no Z bits are set.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]ednsnegotiation</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Enable / disable EDNS version negotiation. By default
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews EDNS version negotiation is enabled.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Specify EDNS option with code point <code class="option">code</code>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and optionally payload of <code class="option">value</code> as a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews hexadecimal string. <code class="option">+noednsopt</code>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews clears the EDNS options to be sent.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Send an EDNS Expire option.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Do not try the next server if you receive a SERVFAIL.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The default is to not try the next server which is
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the reverse of normal stub resolver behavior.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]header-only</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Send a query with a DNS header without a question section.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The default is to add a question section. The query type
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and query name are ignored when this is set.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Show [or do not show] the IP address and port number
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews that supplied the answer when the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>+short</code></em> option is enabled. If
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews short form answers are requested, the default is not
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to show the source address and port number of the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews server that provided the answer.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Ignore truncation in UDP responses instead of retrying
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews with TCP. By default, TCP retries are performed.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Keep the TCP socket open between queries and reuse
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews it rather than creating a new TCP socket for each
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews lookup. The default is <code class="option">+nokeepopen</code>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Print records like the SOA records in a verbose
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews multi-line format with human-readable comments. The
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews default is to print each record on a single line, to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews facilitate machine parsing of the <span><strong class="command">dig</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set the number of dots that have to appear in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews for it to be considered absolute. The default value
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is that defined using the ndots statement in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">/etc/resolv.conf</code>, or 1 if no
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews ndots statement is present. Names with fewer dots
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews are interpreted as relative names and will be searched
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews for in the domains listed in the <code class="option">search</code>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews or <code class="option">domain</code> directive in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">/etc/resolv.conf</code> if
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Include an EDNS name server ID request when sending
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews When this option is set, <span><strong class="command">dig</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews attempts to find the authoritative name servers for
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the zone containing the name being looked up and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews display the SOA record that each name server has for
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Print only one (starting) SOA record when performing
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews an AXFR. The default is to print both the starting
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews and ending SOA records.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]opcode=value</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set [restore] the DNS message opcode to the specified
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews value. The default value is QUERY (0).
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Print [do not print] the query as it is sent. By
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews default, the query is not printed.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]question</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Print [do not print] the question section of a query
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews when an answer is returned. The default is to print
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the question section as a comment.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]rdflag</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews A synonym for <em class="parameter"><code>+[no]recurse</code></em>.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Toggle the setting of the RD (recursion desired) bit
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews in the query. This bit is set by default, which means
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> normally sends recursive
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews queries. Recursion is automatically disabled when
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the <em class="parameter"><code>+nssearch</code></em> or
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>+trace</code></em> query options are used.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+retry=T</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Sets the number of times to retry UDP queries to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews server to <em class="parameter"><code>T</code></em> instead of the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews this does not include the initial query.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Toggle the display of per-record comments in the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews output (for example, human-readable key information
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews about DNSKEY records). The default is not to print
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews record comments unless multiline mode is active.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]search</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Use [do not use] the search list defined by the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews searchlist or domain directive in
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">resolv.conf</code> (if any). The search
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews list is not used by default.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews 'ndots' from <code class="filename">resolv.conf</code> (default 1)
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews which may be overridden by <em class="parameter"><code>+ndots</code></em>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews determines if the name will be treated as relative
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews or not and hence whether a search is eventually
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews performed or not.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]short</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Provide a terse answer. The default is to print the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews answer in a verbose form.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Perform [do not perform] a search showing intermediate
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Chase DNSSEC signature chains. Requires dig be
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews compiled with -DDIG_SIGCHASE.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+split=W</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Split long hex- or base64-formatted fields in resource
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews records into chunks of <em class="parameter"><code>W</code></em>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews characters (where <em class="parameter"><code>W</code></em> is rounded
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews up to the nearest multiple of 4).
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>+nosplit</code></em> or
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>+split=0</code></em> causes fields not to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews be split at all. The default is 56 characters, or
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews 44 characters when multiline mode is active.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews This query option toggles the printing of statistics:
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews when the query was made, the size of the reply and
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews so on. The default behavior is to print the query
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Send an EDNS Client Subnet option with the specified
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews IP address or network prefix.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Use [do not use] TCP when querying name servers. The
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews default behavior is to use UDP unless an
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="literal">ixfr=N</code> query is requested, in which
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews case the default is TCP. AXFR queries always use
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+timeout=T</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Sets the timeout for a query to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>T</code></em> seconds. The default
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews timeout is 5 seconds.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews An attempt to set <em class="parameter"><code>T</code></em> to less
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews than 1 will result
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews in a query timeout of 1 second being applied.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews When chasing DNSSEC signature chains perform a top-down
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews validation. Requires dig be compiled with -DDIG_SIGCHASE.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Toggle tracing of the delegation path from the root
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews name servers for the name being looked up. Tracing
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is disabled by default. When tracing is enabled,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> makes iterative queries to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews resolve the name being looked up. It will follow
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews referrals from the root servers, showing the answer
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews from each server that was used to resolve the lookup.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews If @server is also specified, it affects only the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews initial query for the root zone name servers.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">+dnssec</strong></span> is also set when +trace
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is set to better emulate the default queries from a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+tries=T</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Sets the number of times to try UDP queries to server
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to <em class="parameter"><code>T</code></em> instead of the default,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews 3. If <em class="parameter"><code>T</code></em> is less than or equal
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to zero, the number of tries is silently rounded up
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Specifies a file containing trusted keys to be used
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews with <code class="option">+sigchase</code>. Each DNSKEY record
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews must be on its own line.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews If not specified, <span><strong class="command">dig</strong></span> will look
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews for <code class="filename">/etc/trusted-key.key</code> then
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <code class="filename">trusted-key.key</code> in the current
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Requires dig be compiled with -DDIG_SIGCHASE.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Display [do not display] the TTL when printing the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Display [do not display] the TTL in friendly human-readable
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews time units of "s", "m", "h", "d", and "w", representing
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews seconds, minutes, hours, days and weeks. Implies +ttlid.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Use [do not use] TCP when querying name servers. This
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews is provided for backwards compatibility. The "vc"
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews stands for "virtual circuit".
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews Set [do not set] the last unassigned DNS header flag in a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews DNS query. This flag is off by default.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<a name="id2669688"></a><h2>MULTIPLE QUERIES</h2>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The BIND 9 implementation of <span><strong class="command">dig </strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews specifying multiple queries on the command line (in addition to
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews supporting the <code class="option">-f</code> batch file option). Each of those
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews queries can be supplied with its own set of flags, options and query
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews In this case, each <em class="parameter"><code>query</code></em> argument
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews represent an
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews individual query in the command-line syntax described above. Each
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews consists of any of the standard options and flags, the name to be
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews looked up, an optional query type and class and any query options that
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews should be applied to that query.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews A global set of query options, which should be applied to all queries,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews can also be supplied. These global query options must precede the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews first tuple of name, class, type, options, flags, and query options
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews supplied on the command line. Any global query options (except
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the <code class="option">+[no]cmd</code> option) can be
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews overridden by a query-specific set of query options. For example:
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrewsdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews shows how <span><strong class="command">dig</strong></span> could be used from the
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews command line
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews reverse lookup of 127.0.0.1 and a query for the NS records of
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews A global query option of <em class="parameter"><code>+qr</code></em> is
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews that <span><strong class="command">dig</strong></span> shows the initial query it made
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews lookup. The final query has a local query option of
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews will not print the initial query when it looks up the NS records for
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews domain name) support, it can accept and display non-ASCII domain names.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> appropriately converts character encoding of
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews domain name before sending a request to DNS server or displaying a
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews reply from the server.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews If you'd like to turn off the IDN support for some reason, defines
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews the <code class="envar">IDN_DISABLE</code> environment variable.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews The IDN support is disabled if the variable is set when
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span><strong class="command">dig</strong></span> runs.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<p><code class="filename">/etc/resolv.conf</code>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews There are probably too many query options.
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<table width="100%" summary="Navigation footer">
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<td width="40%" align="left" valign="top">Manual pages�</td>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<td width="40%" align="right" valign="top">�host</td>
5c526acb82c882e41b655c31f5fa4425c87b671cMark Andrews<p style="text-align: center;">BIND 9.11.0pre-alpha</p>