man.dig.html revision 85d259b3cf22bdbf7c1c1dadd95dfea4d5a84375
0N/A<!--
4552N/A - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
0N/A - Copyright (C) 2000-2003 Internet Software Consortium.
0N/A -
0N/A - Permission to use, copy, modify, and/or distribute this software for any
0N/A - purpose with or without fee is hereby granted, provided that the above
0N/A - copyright notice and this permission notice appear in all copies.
0N/A -
0N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
0N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
0N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
0N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
0N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
0N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
0N/A - PERFORMANCE OF THIS SOFTWARE.
0N/A-->
0N/A<!-- $Id$ -->
0N/A<html>
1472N/A<head>
1472N/A<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1472N/A<title>dig</title>
0N/A<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
0N/A<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
0N/A<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
1879N/A<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
1879N/A<link rel="next" href="man.host.html" title="host">
1879N/A</head>
1879N/A<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
1879N/A<div class="navheader">
1879N/A<table width="100%" summary="Navigation header">
1879N/A<tr><th colspan="3" align="center">dig</th></tr>
1879N/A<tr>
1879N/A<td width="20%" align="left">
1879N/A<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
1879N/A<th width="60%" align="center">Manual pages</th>
3863N/A<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
1879N/A</td>
1879N/A</tr>
1879N/A</table>
1879N/A<hr>
1879N/A</div>
0N/A<div class="refentry" lang="en">
0N/A<a name="man.dig"></a><div class="titlepage"></div>
0N/A<div class="refnamediv">
0N/A<h2>Name</h2>
0N/A<p>dig &#8212; DNS lookup utility</p>
0N/A</div>
0N/A<div class="refsynopsisdiv">
0N/A<h2>Synopsis</h2>
0N/A<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
0N/A<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
0N/A<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
0N/A</div>
0N/A<div class="refsect1" lang="en">
0N/A<a name="id2613099"></a><h2>DESCRIPTION</h2>
0N/A<p><span><strong class="command">dig</strong></span>
0N/A (domain information groper) is a flexible tool
0N/A for interrogating DNS name servers. It performs DNS lookups and
0N/A displays the answers that are returned from the name server(s) that
0N/A were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
0N/A troubleshoot DNS problems because of its flexibility, ease of use and
0N/A clarity of output. Other lookup tools tend to have less functionality
0N/A than <span><strong class="command">dig</strong></span>.
0N/A </p>
0N/A<p>
0N/A Although <span><strong class="command">dig</strong></span> is normally used with
0N/A command-line
21N/A arguments, it also has a batch mode of operation for reading lookup
0N/A requests from a file. A brief summary of its command-line arguments
0N/A and options is printed when the <code class="option">-h</code> option is given.
0N/A Unlike earlier versions, the BIND 9 implementation of
0N/A <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
0N/A from the
0N/A command line.
0N/A </p>
0N/A<p>
0N/A Unless it is told to query a specific name server,
0N/A <span><strong class="command">dig</strong></span> will try each of the servers listed in
0N/A <code class="filename">/etc/resolv.conf</code>. If no usable server addreses
0N/A are found, <span><strong class="command">dig</strong></span> will send the query to the local
0N/A host.
0N/A </p>
0N/A<p>
0N/A When no command line arguments or options are given,
0N/A <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
0N/A </p>
0N/A<p>
0N/A It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
0N/A <code class="filename">${HOME}/.digrc</code>. This file is read and
0N/A any options in it
0N/A are applied before the command line arguments.
0N/A </p>
0N/A<p>
3863N/A The IN and CH class names overlap with the IN and CH top level
3863N/A domains names. Either use the <code class="option">-t</code> and
3863N/A <code class="option">-c</code> options to specify the type and class,
0N/A use the <code class="option">-q</code> the specify the domain name, or
0N/A use "IN." and "CH." when looking up these top level domains.
0N/A </p>
0N/A</div>
0N/A<div class="refsect1" lang="en">
0N/A<a name="id2613475"></a><h2>SIMPLE USAGE</h2>
0N/A<p>
0N/A A typical invocation of <span><strong class="command">dig</strong></span> looks like:
0N/A </p>
0N/A<pre class="programlisting"> dig @server name type </pre>
0N/A<p>
0N/A where:
0N/A
0N/A </p>
0N/A<div class="variablelist"><dl>
0N/A<dt><span class="term"><code class="constant">server</code></span></dt>
0N/A<dd>
0N/A<p>
0N/A is the name or IP address of the name server to query. This
4552N/A can be an IPv4 address in dotted-decimal notation or an IPv6
4552N/A address in colon-delimited notation. When the supplied
3863N/A <em class="parameter"><code>server</code></em> argument is a hostname,
0N/A <span><strong class="command">dig</strong></span> resolves that name before querying
0N/A that name server.
0N/A </p>
3863N/A<p>
0N/A If no <em class="parameter"><code>server</code></em> argument is
3863N/A provided, <span><strong class="command">dig</strong></span> consults
0N/A <code class="filename">/etc/resolv.conf</code>; if an
3863N/A address is found there, it queries the name server at
0N/A that address. If either of the <code class="option">-4</code> or
3863N/A <code class="option">-6</code> options are in use, then
0N/A only addresses for the corresponding transport
0N/A will be tried. If no usable addresses are found,
0N/A <span><strong class="command">dig</strong></span> will send the query to the
0N/A local host. The reply from the name server that
0N/A responds is displayed.
0N/A </p>
0N/A</dd>
0N/A<dt><span class="term"><code class="constant">name</code></span></dt>
0N/A<dd><p>
0N/A is the name of the resource record that is to be looked up.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="constant">type</code></span></dt>
0N/A<dd><p>
0N/A indicates what type of query is required &#8212;
0N/A ANY, A, MX, SIG, etc.
0N/A <em class="parameter"><code>type</code></em> can be any valid query
0N/A type. If no
0N/A <em class="parameter"><code>type</code></em> argument is supplied,
0N/A <span><strong class="command">dig</strong></span> will perform a lookup for an
0N/A A record.
0N/A </p></dd>
0N/A</dl></div>
0N/A<p>
0N/A </p>
0N/A</div>
0N/A<div class="refsect1" lang="en">
0N/A<a name="id2613669"></a><h2>OPTIONS</h2>
0N/A<p>
0N/A The <code class="option">-b</code> option sets the source IP address of the query
0N/A to <em class="parameter"><code>address</code></em>. This must be a valid
0N/A address on
0N/A one of the host's network interfaces or "0.0.0.0" or "::". An optional
0N/A port
0N/A may be specified by appending "#&lt;port&gt;"
0N/A </p>
0N/A<p>
0N/A The default query class (IN for internet) is overridden by the
0N/A <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
0N/A any valid
0N/A class, such as HS for Hesiod records or CH for Chaosnet records.
0N/A </p>
0N/A<p>
0N/A The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
0N/A operate
0N/A in batch mode by reading a list of lookup requests to process from the
0N/A file <em class="parameter"><code>filename</code></em>. The file contains a
0N/A number of
0N/A queries, one per line. Each entry in the file should be organized in
0N/A the same way they would be presented as queries to
0N/A <span><strong class="command">dig</strong></span> using the command-line interface.
0N/A </p>
0N/A<p>
0N/A The <code class="option">-m</code> option enables memory usage debugging.
0N/A
0N/A </p>
0N/A<p>
0N/A If a non-standard port number is to be queried, the
0N/A <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
0N/A the port number that <span><strong class="command">dig</strong></span> will send its
0N/A queries
0N/A instead of the standard DNS port number 53. This option would be used
0N/A to test a name server that has been configured to listen for queries
0N/A on a non-standard port number.
0N/A </p>
0N/A<p>
0N/A The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
0N/A to only
0N/A use IPv4 query transport. The <code class="option">-6</code> option forces
0N/A <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
0N/A </p>
0N/A<p>
0N/A The <code class="option">-t</code> option sets the query type to
0N/A <em class="parameter"><code>type</code></em>. It can be any valid query type
0N/A which is
0N/A supported in BIND 9. The default query type is "A", unless the
0N/A <code class="option">-x</code> option is supplied to indicate a reverse lookup.
0N/A A zone transfer can be requested by specifying a type of AXFR. When
0N/A an incremental zone transfer (IXFR) is required,
0N/A <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
0N/A The incremental zone transfer will contain the changes made to the zone
0N/A since the serial number in the zone's SOA record was
0N/A <em class="parameter"><code>N</code></em>.
0N/A </p>
0N/A<p>
0N/A The <code class="option">-q</code> option sets the query name to
0N/A <em class="parameter"><code>name</code></em>. This useful do distinguish the
208N/A <em class="parameter"><code>name</code></em> from other arguments.
208N/A </p>
6N/A<p>
6N/A Reverse lookups &#8212; mapping addresses to names &#8212; are simplified by the
0N/A <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
0N/A an IPv4
0N/A address in dotted-decimal notation, or a colon-delimited IPv6 address.
0N/A When this option is used, there is no need to provide the
0N/A <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
0N/A <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
0N/A automatically performs a lookup for a name like
6N/A <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
0N/A query type and
0N/A class to PTR and IN respectively. By default, IPv6 addresses are
0N/A looked up using nibble format under the IP6.ARPA domain.
0N/A To use the older RFC1886 method using the IP6.INT domain
6N/A specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
208N/A are now experimental and are not attempted.
6N/A </p>
0N/A<p>
0N/A To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
581N/A their
581N/A responses using transaction signatures (TSIG), specify a TSIG key file
581N/A using the <code class="option">-k</code> option. You can also specify the TSIG
208N/A key itself on the command line using the <code class="option">-y</code> option;
208N/A <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
208N/A <em class="parameter"><code>name</code></em> is the name of the TSIG key and
208N/A <em class="parameter"><code>key</code></em> is the actual key. The key is a
581N/A base-64
581N/A encoded string, typically generated by
581N/A <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
581N/A
581N/A Caution should be taken when using the <code class="option">-y</code> option on
581N/A multi-user systems as the key can be visible in the output from
581N/A <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
581N/A or in the shell's history file. When
208N/A using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
208N/A server that is queried needs to know the key and algorithm that is
581N/A being used. In BIND, this is done by providing appropriate
581N/A <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
581N/A <code class="filename">named.conf</code>.
581N/A </p>
581N/A</div>
208N/A<div class="refsect1" lang="en">
208N/A<a name="id2666030"></a><h2>QUERY OPTIONS</h2>
208N/A<p><span><strong class="command">dig</strong></span>
208N/A provides a number of query options which affect
208N/A the way in which lookups are made and the results displayed. Some of
208N/A these set or reset flag bits in the query header, some determine which
208N/A sections of the answer get printed, and others determine the timeout
208N/A and retry strategies.
208N/A </p>
208N/A<p>
208N/A Each query option is identified by a keyword preceded by a plus sign
208N/A (<code class="literal">+</code>). Some keywords set or reset an
208N/A option. These may be preceded
0N/A by the string <code class="literal">no</code> to negate the meaning of
887N/A that keyword. Other
887N/A keywords assign values to options like the timeout interval. They
887N/A have the form <code class="option">+keyword=value</code>.
887N/A The query options are:
887N/A
887N/A </p>
887N/A<div class="variablelist"><dl>
887N/A<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
887N/A<dd><p>
887N/A Use [do not use] TCP when querying name servers. The default
208N/A behavior is to use UDP unless an AXFR or IXFR query is
0N/A requested, in
0N/A which case a TCP connection is used.
6N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
0N/A<dd><p>
0N/A Use [do not use] TCP when querying name servers. This alternate
4552N/A syntax to <em class="parameter"><code>+[no]tcp</code></em> is
4552N/A provided for backwards
4552N/A compatibility. The "vc" stands for "virtual circuit".
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
0N/A<dd><p>
0N/A Ignore truncation in UDP responses instead of retrying with TCP.
6N/A By
0N/A default, TCP retries are performed.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
1532N/A<dd><p>
1532N/A Set the search list to contain the single domain
1532N/A <em class="parameter"><code>somename</code></em>, as if specified in
1532N/A a
1532N/A <span><strong class="command">domain</strong></span> directive in
1532N/A <code class="filename">/etc/resolv.conf</code>, and enable
1532N/A search list
1532N/A processing as if the <em class="parameter"><code>+search</code></em>
1532N/A option were given.
1532N/A </p></dd>
1532N/A<dt><span class="term"><code class="option">+[no]search</code></span></dt>
1532N/A<dd><p>
1532N/A Use [do not use] the search list defined by the searchlist or
208N/A domain
0N/A directive in <code class="filename">resolv.conf</code> (if
0N/A any).
0N/A The search list is not used by default.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
0N/A<dd><p>
1532N/A Perform [do not perform] a search showing intermediate
1532N/A results.
1532N/A </p></dd>
1532N/A<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
1532N/A<dd><p>
1532N/A Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
1532N/A </p></dd>
1532N/A<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
1532N/A<dd><p>
1532N/A Sets the "aa" flag in the query.
1532N/A </p></dd>
1532N/A<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
1532N/A<dd><p>
0N/A A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
0N/A<dd><p>
0N/A Set [do not set] the AD (authentic data) bit in the
0N/A query. This requests the server to return whether
0N/A all of the answer and authority sections have all
489N/A been validated as secure according to the security
0N/A policy of the server. AD=1 indicates that all records
208N/A have been validated as secure and the answer is not
208N/A from a OPT-OUT range. AD=0 indicate that some part
208N/A of the answer was insecure or not validated. This
208N/A bit is set by default.
887N/A </p></dd>
208N/A<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
0N/A<dd><p>
208N/A Set [do not set] the CD (checking disabled) bit in the query.
208N/A This
208N/A requests the server to not perform DNSSEC validation of
208N/A responses.
208N/A </p></dd>
208N/A<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
208N/A<dd><p>
208N/A Display [do not display] the CLASS when printing the record.
208N/A </p></dd>
208N/A<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
208N/A<dd><p>
208N/A Display [do not display] the TTL when printing the record.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
0N/A<dd><p>
0N/A Toggle the setting of the RD (recursion desired) bit
0N/A in the query. This bit is set by default, which means
0N/A <span><strong class="command">dig</strong></span> normally sends recursive
0N/A queries. Recursion is automatically disabled when
0N/A the <em class="parameter"><code>+nssearch</code></em> or
0N/A <em class="parameter"><code>+trace</code></em> query options are used.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
0N/A<dd><p>
0N/A When this option is set, <span><strong class="command">dig</strong></span>
0N/A attempts to find the
0N/A authoritative name servers for the zone containing the name
0N/A being
0N/A looked up and display the SOA record that each name server has
0N/A for the
0N/A zone.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
0N/A<dd>
0N/A<p>
0N/A Toggle tracing of the delegation path from the root
0N/A name servers for the name being looked up. Tracing
0N/A is disabled by default. When tracing is enabled,
0N/A <span><strong class="command">dig</strong></span> makes iterative queries to
0N/A resolve the name being looked up. It will follow
0N/A referrals from the root servers, showing the answer
1532N/A from each server that was used to resolve the lookup.
1532N/A </p>
1532N/A<p>
0N/A <span><strong class="command">+dnssec</strong></span> is also set when +trace is
0N/A set to better emulate the default queries from a nameserver.
0N/A </p>
0N/A</dd>
0N/A<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
0N/A<dd><p>
113N/A Toggles the printing of the initial comment in the output
0N/A identifying
0N/A the version of <span><strong class="command">dig</strong></span> and the query
0N/A options that have
616N/A been applied. This comment is printed by default.
616N/A </p></dd>
616N/A<dt><span class="term"><code class="option">+[no]short</code></span></dt>
616N/A<dd><p>
616N/A Provide a terse answer. The default is to print the answer in a
616N/A verbose form.
616N/A </p></dd>
616N/A<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
616N/A<dd><p>
616N/A Show [or do not show] the IP address and port number that
616N/A supplied the
616N/A answer when the <em class="parameter"><code>+short</code></em> option
616N/A is enabled. If
0N/A short form answers are requested, the default is not to show the
342N/A source address and port number of the server that provided the
342N/A answer.
616N/A </p></dd>
616N/A<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
616N/A<dd><p>
616N/A Toggle the display of comment lines in the output. The default
616N/A is to print comments.
616N/A </p></dd>
616N/A<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
616N/A<dd><p>
616N/A Toggle the display of per-record comments in the output (for
616N/A example, human-readable key information about DNSKEY records).
616N/A The default is not to print record comments unless multiline
342N/A mode is active.
616N/A </p></dd>
616N/A<dt><span class="term"><code class="option">+split=W</code></span></dt>
342N/A<dd><p>
342N/A Split long hex- or base64-formatted fields in resource
342N/A records into chunks of <em class="parameter"><code>W</code></em> characters
342N/A (where <em class="parameter"><code>W</code></em> is rounded up to the nearest
616N/A multiple of 4).
616N/A <em class="parameter"><code>+nosplit</code></em> or
616N/A <em class="parameter"><code>+split=0</code></em> causes fields not to be
616N/A split at all. The default is 56 characters, or 44 characters
616N/A when multiline mode is active.
616N/A </p></dd>
616N/A<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
616N/A<dd><p>
616N/A This query option toggles the printing of statistics: when the
616N/A query
616N/A was made, the size of the reply and so on. The default
616N/A behavior is
616N/A to print the query statistics.
616N/A </p></dd>
616N/A<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
616N/A<dd><p>
616N/A Print [do not print] the query as it is sent.
616N/A By default, the query is not printed.
616N/A </p></dd>
616N/A<dt><span class="term"><code class="option">+[no]question</code></span></dt>
616N/A<dd><p>
2384N/A Print [do not print] the question section of a query when an
2384N/A answer is
2454N/A returned. The default is to print the question section as a
2454N/A comment.
0N/A </p></dd>
2941N/A<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
2941N/A<dd><p>
2941N/A Display [do not display] the answer section of a reply. The
2941N/A default
2941N/A is to display it.
2941N/A </p></dd>
2941N/A<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
2941N/A<dd><p>
2941N/A Display [do not display] the authority section of a reply. The
2941N/A default is to display it.
2941N/A </p></dd>
2941N/A<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
2941N/A<dd><p>
2941N/A Display [do not display] the additional section of a reply.
2941N/A The default is to display it.
2941N/A </p></dd>
2941N/A<dt><span class="term"><code class="option">+[no]all</code></span></dt>
2941N/A<dd><p>
2941N/A Set or clear all display flags.
2941N/A </p></dd>
2941N/A<dt><span class="term"><code class="option">+time=T</code></span></dt>
2941N/A<dd><p>
2941N/A
2941N/A Sets the timeout for a query to
2941N/A <em class="parameter"><code>T</code></em> seconds. The default
2941N/A timeout is 5 seconds.
2941N/A An attempt to set <em class="parameter"><code>T</code></em> to less
2941N/A than 1 will result
2941N/A in a query timeout of 1 second being applied.
2941N/A </p></dd>
2941N/A<dt><span class="term"><code class="option">+tries=T</code></span></dt>
2941N/A<dd><p>
2941N/A Sets the number of times to try UDP queries to server to
2941N/A <em class="parameter"><code>T</code></em> instead of the default, 3.
0N/A If
2941N/A <em class="parameter"><code>T</code></em> is less than or equal to
2941N/A zero, the number of
2454N/A tries is silently rounded up to 1.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+retry=T</code></span></dt>
0N/A<dd><p>
0N/A Sets the number of times to retry UDP queries to server to
2384N/A <em class="parameter"><code>T</code></em> instead of the default, 2.
2384N/A Unlike
2454N/A <em class="parameter"><code>+tries</code></em>, this does not include
2454N/A the initial
2454N/A query.
2454N/A </p></dd>
2454N/A<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
2454N/A<dd><p>
2454N/A Set the number of dots that have to appear in
2454N/A <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
0N/A considered absolute. The default value is that defined using
0N/A the
0N/A ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
0N/A ndots statement is present. Names with fewer dots are
2384N/A interpreted as
2384N/A relative names and will be searched for in the domains listed in
2384N/A the
2384N/A <code class="option">search</code> or <code class="option">domain</code> directive in
2384N/A <code class="filename">/etc/resolv.conf</code>.
2384N/A </p></dd>
2384N/A<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
2941N/A<dd><p>
2941N/A Set the UDP message buffer size advertised using EDNS0 to
2941N/A <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
2941N/A of this buffer are 65535 and 0 respectively. Values outside
0N/A this range are rounded up or down appropriately.
0N/A Values other than zero will cause a EDNS query to be sent.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+edns=#</code></span></dt>
0N/A<dd><p>
0N/A Specify the EDNS version to query with. Valid values
0N/A are 0 to 255. Setting the EDNS version will cause
0N/A a EDNS query to be sent. <code class="option">+noedns</code>
0N/A clears the remembered EDNS version. EDNS is set to
0N/A 0 by default.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
0N/A<dd><p>
0N/A Print records like the SOA records in a verbose multi-line
0N/A format with human-readable comments. The default is to print
0N/A each record on a single line, to facilitate machine parsing
0N/A of the <span><strong class="command">dig</strong></span> output.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
0N/A<dd><p>
0N/A Print only one (starting) SOA record when performing
0N/A an AXFR. The default is to print both the starting and
0N/A ending SOA records.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
0N/A<dd><p>
0N/A Do not try the next server if you receive a SERVFAIL. The
0N/A default is
0N/A to not try the next server which is the reverse of normal stub
0N/A resolver
1091N/A behavior.
1091N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
0N/A<dd><p>
0N/A Attempt to display the contents of messages which are malformed.
0N/A The default is to not display malformed answers.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
0N/A<dd><p>
0N/A Requests DNSSEC records be sent by setting the DNSSEC OK bit
342N/A (DO)
1091N/A in the OPT record in the additional section of the query.
1091N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
0N/A<dd><p>
0N/A Chase DNSSEC signature chains. Requires dig be compiled with
0N/A -DDIG_SIGCHASE.
0N/A </p></dd>
0N/A<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
0N/A<dd>
0N/A<p>
0N/A Specifies a file containing trusted keys to be used with
0N/A <code class="option">+sigchase</code>. Each DNSKEY record must be
0N/A on its own line.
0N/A </p>
0N/A<p>
0N/A If not specified, <span><strong class="command">dig</strong></span> will look for
0N/A <code class="filename">/etc/trusted-key.key</code> then
0N/A <code class="filename">trusted-key.key</code> in the current directory.
0N/A </p>
0N/A<p>
0N/A Requires dig be compiled with -DDIG_SIGCHASE.
0N/A </p>
0N/A</dd>
0N/A<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
0N/A<dd><p>
0N/A When chasing DNSSEC signature chains perform a top-down
0N/A validation.
0N/A Requires dig be compiled with -DDIG_SIGCHASE.
0N/A </p></dd>
342N/A<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
342N/A<dd><p>
342N/A Include an EDNS name server ID request when sending a query.
342N/A </p></dd>
342N/A</dl></div>
342N/A<p>
2353N/A
2353N/A </p>
0N/A</div>
0N/A<div class="refsect1" lang="en">
0N/A<a name="id2667101"></a><h2>MULTIPLE QUERIES</h2>
0N/A<p>
0N/A The BIND 9 implementation of <span><strong class="command">dig </strong></span>
0N/A supports
0N/A specifying multiple queries on the command line (in addition to
0N/A supporting the <code class="option">-f</code> batch file option). Each of those
0N/A queries can be supplied with its own set of flags, options and query
0N/A options.
0N/A </p>
0N/A<p>
0N/A In this case, each <em class="parameter"><code>query</code></em> argument
0N/A represent an
0N/A individual query in the command-line syntax described above. Each
0N/A consists of any of the standard options and flags, the name to be
0N/A looked up, an optional query type and class and any query options that
0N/A should be applied to that query.
0N/A </p>
0N/A<p>
0N/A A global set of query options, which should be applied to all queries,
0N/A can also be supplied. These global query options must precede the
0N/A first tuple of name, class, type, options, flags, and query options
0N/A supplied on the command line. Any global query options (except
0N/A the <code class="option">+[no]cmd</code> option) can be
342N/A overridden by a query-specific set of query options. For example:
342N/A </p>
342N/A<pre class="programlisting">
0N/Adig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
0N/A</pre>
0N/A<p>
0N/A shows how <span><strong class="command">dig</strong></span> could be used from the
0N/A command line
0N/A to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
0N/A reverse lookup of 127.0.0.1 and a query for the NS records of
0N/A <code class="literal">isc.org</code>.
0N/A
0N/A A global query option of <em class="parameter"><code>+qr</code></em> is
0N/A applied, so
0N/A that <span><strong class="command">dig</strong></span> shows the initial query it made
0N/A for each
0N/A lookup. The final query has a local query option of
0N/A <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
0N/A will not print the initial query when it looks up the NS records for
342N/A <code class="literal">isc.org</code>.
342N/A </p>
342N/A</div>
342N/A<div class="refsect1" lang="en">
0N/A<a name="id2667323"></a><h2>IDN SUPPORT</h2>
0N/A<p>
0N/A If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
0N/A domain name) support, it can accept and display non-ASCII domain names.
0N/A <span><strong class="command">dig</strong></span> appropriately converts character encoding of
0N/A domain name before sending a request to DNS server or displaying a
0N/A reply from the server.
0N/A If you'd like to turn off the IDN support for some reason, defines
0N/A the <code class="envar">IDN_DISABLE</code> environment variable.
0N/A The IDN support is disabled if the variable is set when
0N/A <span><strong class="command">dig</strong></span> runs.
0N/A </p>
0N/A</div>
0N/A<div class="refsect1" lang="en">
0N/A<a name="id2667352"></a><h2>FILES</h2>
0N/A<p><code class="filename">/etc/resolv.conf</code>
0N/A </p>
0N/A<p><code class="filename">${HOME}/.digrc</code>
0N/A </p>
0N/A</div>
0N/A<div class="refsect1" lang="en">
0N/A<a name="id2667373"></a><h2>SEE ALSO</h2>
0N/A<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
0N/A <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
2414N/A <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
2414N/A <em class="citetitle">RFC1035</em>.
2414N/A </p>
2414N/A</div>
2414N/A<div class="refsect1" lang="en">
2414N/A<a name="id2667411"></a><h2>BUGS</h2>
2414N/A<p>
2414N/A There are probably too many query options.
2414N/A </p>
2414N/A</div>
2414N/A</div>
4348N/A<div class="navfooter">
2414N/A<hr>
2414N/A<table width="100%" summary="Navigation footer">
2414N/A<tr>
2414N/A<td width="40%" align="left">
2414N/A<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
2414N/A<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
2414N/A<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
2414N/A</td>
2414N/A</tr>
0N/A<tr>
2414N/A<td width="40%" align="left" valign="top">Manual pages�</td>
0N/A<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
940N/A<td width="40%" align="right" valign="top">�host</td>
2414N/A</tr>
2414N/A</table>
2414N/A</div>
940N/A</body>
940N/A</html>
2414N/A