man.dig.html revision 7f18387d4b5e85a430436570a5072e41d83fa246
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - Permission to use, copy, modify, and/or distribute this software for any
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - purpose with or without fee is hereby granted, provided that the above
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - copyright notice and this permission notice appear in all copies.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - PERFORMANCE OF THIS SOFTWARE.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<!-- $Id$ -->
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<link rel="prev" href="Bv9ARM.ch13.html" title="Manual pages">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<link rel="next" href="man.host.html" title="host">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<a name="man.dig"></a><div class="titlepage"></div>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<p><span><strong class="command">dig</strong></span>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt (domain information groper) is a flexible tool
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt for interrogating DNS name servers. It performs DNS lookups and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt displays the answers that are returned from the name server(s) that
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt troubleshoot DNS problems because of its flexibility, ease of use and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt clarity of output. Other lookup tools tend to have less functionality
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt than <span><strong class="command">dig</strong></span>.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Although <span><strong class="command">dig</strong></span> is normally used with
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt command-line
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt arguments, it also has a batch mode of operation for reading lookup
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt requests from a file. A brief summary of its command-line arguments
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt and options is printed when the <code class="option">-h</code> option is given.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Unlike earlier versions, the BIND 9 implementation of
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt command line.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Unless it is told to query a specific name server,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> will try each of the servers listed in
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt are found, <span><strong class="command">dig</strong></span> will send the query to the local
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt When no command line arguments or options are given,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="filename">${HOME}/.digrc</code>. This file is read and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt any options in it
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt are applied before the command line arguments.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt The IN and CH class names overlap with the IN and CH top level
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt domain names. Either use the <code class="option">-t</code> and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="option">-c</code> options to specify the type and class,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt use the <code class="option">-q</code> the specify the domain name, or
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt use "IN." and "CH." when looking up these top level domains.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt A typical invocation of <span><strong class="command">dig</strong></span> looks like:
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<pre class="programlisting"> dig @server name type </pre>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="constant">server</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt is the name or IP address of the name server to query. This
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt can be an IPv4 address in dotted-decimal notation or an IPv6
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt address in colon-delimited notation. When the supplied
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>server</code></em> argument is a hostname,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> resolves that name before querying
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt that name server.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt If no <em class="parameter"><code>server</code></em> argument is
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt provided, <span><strong class="command">dig</strong></span> consults
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="filename">/etc/resolv.conf</code>; if an
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt address is found there, it queries the name server at
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt that address. If either of the <code class="option">-4</code> or
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="option">-6</code> options are in use, then
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt only addresses for the corresponding transport
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt will be tried. If no usable addresses are found,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> will send the query to the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt local host. The reply from the name server that
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt responds is displayed.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="constant">name</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt is the name of the resource record that is to be looked up.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<dt><span class="term"><code class="constant">type</code></span></dt>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt indicates what type of query is required —
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt ANY, A, MX, SIG, etc.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <em class="parameter"><code>type</code></em> can be any valid query
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <em class="parameter"><code>type</code></em> argument is supplied,
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <span><strong class="command">dig</strong></span> will perform a lookup for an
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt Use IPv4 only.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt Use IPv6 only.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term">-b <em class="replaceable"><code>address[<span class="optional">#port</span>]</code></em></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set the source IP address of the query.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The <em class="parameter"><code>address</code></em> must be a valid address on
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt one of the host's network interfaces, or "0.0.0.0" or "::". An
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt optional port may be specified by appending "#<port>"
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set the query class. The
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt default <em class="parameter"><code>class</code></em> is IN; other classes
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt are HS for Hesiod records or CH for Chaosnet records.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Batch mode: <span><strong class="command">dig</strong></span> reads a list of lookup
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt requests to process from the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt given <em class="parameter"><code>file</code></em>. Each line in the file
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt should be organized in the same way they would be
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt presented as queries to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> using the command-line interface.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Do reverse IPv6 lookups using the obsolete RFC1886 IP6.INT
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt domain, which is no longer in use. Obsolete bit string
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt label queries (RFC2874) are not attempted.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term">-k <em class="replaceable"><code>keyfile</code></em></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Sign queries using TSIG using a key read from the given file.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Key files can be generated using
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <span class="citerefentry"><span class="refentrytitle">tsig-keygen</span>(8)</span>.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt When using TSIG authentication with <span><strong class="command">dig</strong></span>,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the name server that is queried needs to know the key and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt algorithm that is being used. In BIND, this is done by
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt providing appropriate <span><strong class="command">key</strong></span>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt and <span><strong class="command">server</strong></span> statements in
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews Enable memory usage debugging.
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Send the query to a non-standard port on the server,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt instead of the defaut port 53. This option would be used
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt to test a name server that has been configured to listen
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt for queries on a non-standard port number.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term">-q <em class="replaceable"><code>name</code></em></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The domain name to query. This is useful to distinguish
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the <em class="parameter"><code>name</code></em> from other arguments.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The resource record type to query. It can be any valid query type
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt supported in BIND 9. The default query type is "A", unless the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="option">-x</code> option is supplied to indicate a reverse lookup.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt A zone transfer can be requested by specifying a type of AXFR. When
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt an incremental zone transfer (IXFR) is required, set the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>type</code></em> to <code class="literal">ixfr=N</code>.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The incremental zone transfer will contain the changes
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt made to the zone since the serial number in the zone's SOA
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Print the version number and exit.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term">-x <em class="replaceable"><code>addr</code></em></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Simplified reverse lookups, for mapping addresses to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt names. The <em class="parameter"><code>addr</code></em> is an IPv4 address
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt in dotted-decimal notation, or a colon-delimited IPv6
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt address. When the <code class="option">-x</code> is used, there is no
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt need to provide
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt arguments. <span><strong class="command">dig</strong></span> automatically performs a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt lookup for a name like
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <code class="literal">94.2.0.192.in-addr.arpa</code> and sets the
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt query type and class to PTR and IN respectively. IPv6
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt addresses are looked up using nibble format under the
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt IP6.ARPA domain (but see also the <code class="option">-i</code>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<dt><span class="term">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></span></dt>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt Sign queries using TSIG with the given authentication key.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <em class="parameter"><code>keyname</code></em> is the name of the key, and
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt valid choices are <code class="literal">hmac-md5</code>,
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt is not specified, the default is <code class="literal">hmac-md5</code>.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt NOTE: You should use the <code class="option">-k</code> option and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt avoid the <code class="option">-y</code> option, because
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt with <code class="option">-y</code> the shared secret is supplied as
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt a command line argument in clear text. This may be visible
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt in the output from
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt or in a history file maintained by the user's shell.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<p><span><strong class="command">dig</strong></span>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt provides a number of query options which affect
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the way in which lookups are made and the results displayed. Some of
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt these set or reset flag bits in the query header, some determine which
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt sections of the answer get printed, and others determine the timeout
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt and retry strategies.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Each query option is identified by a keyword preceded by a plus sign
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt (<code class="literal">+</code>). Some keywords set or reset an
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt option. These may be preceded
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt by the string <code class="literal">no</code> to negate the meaning of
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt that keyword. Other
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt keywords assign values to options like the timeout interval. They
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt have the form <code class="option">+keyword=value</code>.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The query options are:
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Sets the "aa" flag in the query.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Display [do not display] the additional section of a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt reply. The default is to display it.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set [do not set] the AD (authentic data) bit in the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt query. This requests the server to return whether
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt all of the answer and authority sections have all
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt been validated as secure according to the security
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt policy of the server. AD=1 indicates that all records
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt have been validated as secure and the answer is not
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt from a OPT-OUT range. AD=0 indicate that some part
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt of the answer was insecure or not validated. This
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt bit is set by default.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]all</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set or clear all display flags.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Display [do not display] the answer section of a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt reply. The default is to display it.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Display [do not display] the authority section of a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt reply. The default is to display it.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Attempt to display the contents of messages which are
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt malformed. The default is to not display malformed
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set the UDP message buffer size advertised using EDNS0
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt to <em class="parameter"><code>B</code></em> bytes. The maximum and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt minimum sizes of this buffer are 65535 and 0 respectively.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Values outside this range are rounded up or down
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt appropriately. Values other than zero will cause a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt EDNS query to be sent.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set [do not set] the CD (checking disabled) bit in
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the query. This requests the server to not perform
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt DNSSEC validation of responses.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Display [do not display] the CLASS when printing the
37fef4ce36912bd528fe400406d24f115de1422eAutomatic Updater<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Toggles the printing of the initial comment in the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt output identifying the version of <span><strong class="command">dig</strong></span>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt and the query options that have been applied. This
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt comment is printed by default.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt Toggle the display of comment lines in the output.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt The default is to print comments.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Toggle the display of cryptographic fields in DNSSEC
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt records. The contents of these field are unnecessary
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt to debug most DNSSEC validation failures and removing
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt them makes it easier to see the common failures. The
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt default is to display the fields. When omitted they
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt are replaced by the string "[omitted]" or in the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt DNSKEY case the key id is displayed as the replacement,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt e.g. "[ key id = value ]".
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Deprecated, treated as a synonym for
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>+[no]search</code></em>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Requests DNSSEC records be sent by setting the DNSSEC
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt OK bit (DO) in the OPT record in the additional section
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt of the query.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set the search list to contain the single domain
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>somename</code></em>, as if specified in
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt a <span><strong class="command">domain</strong></span> directive in
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="filename">/etc/resolv.conf</code>, and enable
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt search list processing as if the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>+search</code></em> option were given.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set the DSCP code point to be used when sending the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt query. Valid DSCP code points are in the range
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt [0..63]. By default no code point is explicitly set.
37fef4ce36912bd528fe400406d24f115de1422eAutomatic Updater<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Specify the EDNS version to query with. Valid values
37fef4ce36912bd528fe400406d24f115de1422eAutomatic Updater are 0 to 255. Setting the EDNS version will cause
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt a EDNS query to be sent. <code class="option">+noedns</code>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt clears the remembered EDNS version. EDNS is set to
37fef4ce36912bd528fe400406d24f115de1422eAutomatic Updater<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set the must-be-zero EDNS flags bits (Z bits) to the
37fef4ce36912bd528fe400406d24f115de1422eAutomatic Updater specified value. Decimal, hex and octal encodings are
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt accepted. Setting a named flag (e.g. DO) will silently be
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ignored. By default, no Z bits are set.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]ednsnegotiation</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Enable / disable EDNS version negotiation. By default
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt EDNS version negotiation is enabled.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Specify EDNS option with code point <code class="option">code</code>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt and optionally payload of <code class="option">value</code> as a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt hexadecimal string. <code class="option">+noednsopt</code>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt clears the EDNS options to be sent.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Send an EDNS Expire option.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Do not try the next server if you receive a SERVFAIL.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The default is to not try the next server which is
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the reverse of normal stub resolver behavior.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]header-only</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Send a query with a DNS header without a question section.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The default is to add a question section. The query type
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt and query name are ignored when this is set.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Show [or do not show] the IP address and port number
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt that supplied the answer when the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>+short</code></em> option is enabled. If
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt short form answers are requested, the default is not
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt to show the source address and port number of the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt server that provided the answer.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Ignore truncation in UDP responses instead of retrying
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt with TCP. By default, TCP retries are performed.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Keep the TCP socket open between queries and reuse
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt it rather than creating a new TCP socket for each
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt lookup. The default is <code class="option">+nokeepopen</code>.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Print records like the SOA records in a verbose
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt multi-line format with human-readable comments. The
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt default is to print each record on a single line, to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt facilitate machine parsing of the <span><strong class="command">dig</strong></span>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Set the number of dots that have to appear in
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt for it to be considered absolute. The default value
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt is that defined using the ndots statement in
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="filename">/etc/resolv.conf</code>, or 1 if no
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt ndots statement is present. Names with fewer dots
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt are interpreted as relative names and will be searched
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt for in the domains listed in the <code class="option">search</code>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt or <code class="option">domain</code> directive in
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt Include an EDNS name server ID request when sending
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt When this option is set, <span><strong class="command">dig</strong></span>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt attempts to find the authoritative name servers for
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the zone containing the name being looked up and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt display the SOA record that each name server has for
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Print only one (starting) SOA record when performing
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt an AXFR. The default is to print both the starting
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt and ending SOA records.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Print [do not print] the query as it is sent. By
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt default, the query is not printed.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]question</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Print [do not print] the question section of a query
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt when an answer is returned. The default is to print
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the question section as a comment.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Toggle the setting of the RD (recursion desired) bit
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt in the query. This bit is set by default, which means
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> normally sends recursive
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt queries. Recursion is automatically disabled when
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the <em class="parameter"><code>+nssearch</code></em> or
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <em class="parameter"><code>+trace</code></em> query options are used.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<dt><span class="term"><code class="option">+retry=T</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Sets the number of times to retry UDP queries to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt server to <em class="parameter"><code>T</code></em> instead of the
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt this does not include the initial query.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Toggle the display of per-record comments in the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt output (for example, human-readable key information
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt about DNSKEY records). The default is not to print
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt record comments unless multiline mode is active.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]search</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Use [do not use] the search list defined by the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt searchlist or domain directive in
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <code class="filename">resolv.conf</code> (if any). The search
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt list is not used by default.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 'ndots' from <code class="filename">resolv.conf</code> (default 1)
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt which may be overridden by <em class="parameter"><code>+ndots</code></em>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt determines if the name will be treated as relative
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt or not and hence whether a search is eventually
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt performed or not.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]short</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Provide a terse answer. The default is to print the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt answer in a verbose form.
37fef4ce36912bd528fe400406d24f115de1422eAutomatic Updater<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Perform [do not perform] a search showing intermediate
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Chase DNSSEC signature chains. Requires dig be
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt compiled with -DDIG_SIGCHASE.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]sit[<span class="optional">=####</span>]</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Send a Source Identity Token EDNS option, with optional
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt value. Replaying a SIT from a previous response will
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt allow the server to identify a previous client. The
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt default is <code class="option">+nosit</code>. Currently using
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt experimental value 65001 for the option code.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+split=W</code></span></dt>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews Split long hex- or base64-formatted fields in resource
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews records into chunks of <em class="parameter"><code>W</code></em>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews characters (where <em class="parameter"><code>W</code></em> is rounded
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt up to the nearest multiple of 4).
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>+nosplit</code></em> or
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>+split=0</code></em> causes fields not to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt be split at all. The default is 56 characters, or
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 44 characters when multiline mode is active.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt This query option toggles the printing of statistics:
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt when the query was made, the size of the reply and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt so on. The default behavior is to print the query
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Send an EDNS Client Subnet option with the specified
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt IP address or network prefix.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Use [do not use] TCP when querying name servers. The
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt default behavior is to use UDP unless an
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <code class="literal">ixfr=N</code> query is requested, in which
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt case the default is TCP. AXFR queries always use
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+timeout=T</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Sets the timeout for a query to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>T</code></em> seconds. The default
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt timeout is 5 seconds.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt An attempt to set <em class="parameter"><code>T</code></em> to less
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt than 1 will result
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt in a query timeout of 1 second being applied.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt When chasing DNSSEC signature chains perform a top-down
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt validation. Requires dig be compiled with -DDIG_SIGCHASE.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt Toggle tracing of the delegation path from the root
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt name servers for the name being looked up. Tracing
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt is disabled by default. When tracing is enabled,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> makes iterative queries to
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt resolve the name being looked up. It will follow
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt referrals from the root servers, showing the answer
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt from each server that was used to resolve the lookup.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <span><strong class="command">+dnssec</strong></span> is also set when +trace
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt is set to better emulate the default queries from a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+tries=T</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Sets the number of times to try UDP queries to server
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt to <em class="parameter"><code>T</code></em> instead of the default,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt 3. If <em class="parameter"><code>T</code></em> is less than or equal
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt to zero, the number of tries is silently rounded up
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Specifies a file containing trusted keys to be used
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt with <code class="option">+sigchase</code>. Each DNSKEY record
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt must be on its own line.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt If not specified, <span><strong class="command">dig</strong></span> will look
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt for <code class="filename">/etc/trusted-key.key</code> then
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt <code class="filename">trusted-key.key</code> in the current
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews Requires dig be compiled with -DDIG_SIGCHASE.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Display [do not display] the TTL when printing the
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Display [do not display] the TTL in friendly human-readable
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt time units of "s", "m", "h", "d", and "w", representing
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt seconds, minutes, hours, days and weeks. Implies +ttlid.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt Use [do not use] TCP when querying name servers. This
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt is provided for backwards compatibility. The "vc"
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews stands for "virtual circuit".
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt Set [do not set] the last unassigned DNS header flag in a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt DNS query. This flag is off by default.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The BIND 9 implementation of <span><strong class="command">dig </strong></span>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt specifying multiple queries on the command line (in addition to
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews supporting the <code class="option">-f</code> batch file option). Each of those
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews queries can be supplied with its own set of flags, options and query
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews In this case, each <em class="parameter"><code>query</code></em> argument
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt represent an
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt individual query in the command-line syntax described above. Each
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt consists of any of the standard options and flags, the name to be
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt looked up, an optional query type and class and any query options that
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt should be applied to that query.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt A global set of query options, which should be applied to all queries,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt can also be supplied. These global query options must precede the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt first tuple of name, class, type, options, flags, and query options
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt supplied on the command line. Any global query options (except
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the <code class="option">+[no]cmd</code> option) can be
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt overridden by a query-specific set of query options. For example:
ef421f66f47224a42073deaf087378c5d0c9952eEvan Huntdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt shows how <span><strong class="command">dig</strong></span> could be used from the
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt command line
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt reverse lookup of 127.0.0.1 and a query for the NS records of
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt A global query option of <em class="parameter"><code>+qr</code></em> is
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt that <span><strong class="command">dig</strong></span> shows the initial query it made
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt lookup. The final query has a local query option of
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt will not print the initial query when it looks up the NS records for
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt domain name) support, it can accept and display non-ASCII domain names.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> appropriately converts character encoding of
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt domain name before sending a request to DNS server or displaying a
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt reply from the server.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt If you'd like to turn off the IDN support for some reason, defines
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt the <code class="envar">IDN_DISABLE</code> environment variable.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt The IDN support is disabled if the variable is set when
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span><strong class="command">dig</strong></span> runs.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt There are probably too many query options.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<td width="40%" align="left" valign="top">Manual pages�</td>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<td width="40%" align="right" valign="top">�host</td>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<p style="text-align: center;">BIND 9.11.0pre-alpha</p>