man.dig.html revision 8ec3c085233cedb22b05da36e2773c8f357a7e45
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - Copyright (C) 2004-2009 Internet Systems Consortium, Inc. ("ISC")
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - Copyright (C) 2000-2003 Internet Software Consortium.
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - Permission to use, copy, modify, and/or distribute this software for any
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - purpose with or without fee is hereby granted, provided that the above
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - copyright notice and this permission notice appear in all copies.
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff - PERFORMANCE OF THIS SOFTWARE.
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff<!-- $Id: man.dig.html,v 1.124 2009/10/06 01:14:41 tbox Exp $ -->
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<link rel="next" href="man.host.html" title="host">
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff<table width="100%" summary="Navigation header">
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff<tr><th colspan="3" align="center">dig</th></tr>
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff<th width="60%" align="center">Manual pages</th>
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
29f28fe573d4b3b318b3b026d567c1eb86738015Michael Graff<a name="man.dig"></a><div class="titlepage"></div>
11efdeb076d65fa9f0c5fc067dc040e7c99dfba6Michael Graff<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
439c0011e642fb1d26011116144af698125262dbMichael Graff<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff<p><span><strong class="command">dig</strong></span>
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff (domain information groper) is a flexible tool
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff for interrogating DNS name servers. It performs DNS lookups and
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff displays the answers that are returned from the name server(s) that
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff troubleshoot DNS problems because of its flexibility, ease of use and
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff clarity of output. Other lookup tools tend to have less functionality
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff than <span><strong class="command">dig</strong></span>.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff Although <span><strong class="command">dig</strong></span> is normally used with
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff arguments, it also has a batch mode of operation for reading lookup
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff requests from a file. A brief summary of its command-line arguments
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff and options is printed when the <code class="option">-h</code> option is given.
f00d96a15cdd11e764437f9359e67328631caaeaMichael Graff Unlike earlier versions, the BIND 9 implementation of
f00d96a15cdd11e764437f9359e67328631caaeaMichael Graff <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff command line.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff Unless it is told to query a specific name server,
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff <span><strong class="command">dig</strong></span> will try each of the servers listed
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff <code class="filename">/etc/resolv.conf</code>.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff When no command line arguments or options are given,
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff <code class="filename">${HOME}/.digrc</code>. This file is read and
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff any options in it
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff are applied before the command line arguments.
11efdeb076d65fa9f0c5fc067dc040e7c99dfba6Michael Graff The IN and CH class names overlap with the IN and CH top level
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff domains names. Either use the <code class="option">-t</code> and
11efdeb076d65fa9f0c5fc067dc040e7c99dfba6Michael Graff <code class="option">-c</code> options to specify the type and class,
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff use the <code class="option">-q</code> the specify the domain name, or
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff use "IN." and "CH." when looking up these top level domains.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff A typical invocation of <span><strong class="command">dig</strong></span> looks like:
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff<pre class="programlisting"> dig @server name type </pre>
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff<dt><span class="term"><code class="constant">server</code></span></dt>
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff is the name or IP address of the name server to query. This can
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff address in dotted-decimal notation or an IPv6
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff address in colon-delimited notation. When the supplied
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff <em class="parameter"><code>server</code></em> argument is a
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff <span><strong class="command">dig</strong></span> resolves that name before
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff querying that name
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff server. If no <em class="parameter"><code>server</code></em>
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff argument is provided,
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff and queries the name servers listed there. The reply from the
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff server that responds is displayed.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff<dt><span class="term"><code class="constant">name</code></span></dt>
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff is the name of the resource record that is to be looked up.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="constant">type</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff indicates what type of query is required —
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff ANY, A, MX, SIG, etc.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff <em class="parameter"><code>type</code></em> can be any valid query
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff <em class="parameter"><code>type</code></em> argument is supplied,
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff <span><strong class="command">dig</strong></span> will perform a lookup for an
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff The <code class="option">-b</code> option sets the source IP address of the query
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff to <em class="parameter"><code>address</code></em>. This must be a valid
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff one of the host's network interfaces or "0.0.0.0" or "::". An optional
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff may be specified by appending "#<port>"
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff The default query class (IN for internet) is overridden by the
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff class, such as HS for Hesiod records or CH for Chaosnet records.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff in batch mode by reading a list of lookup requests to process from the
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff file <em class="parameter"><code>filename</code></em>. The file contains a
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff queries, one per line. Each entry in the file should be organized in
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff the same way they would be presented as queries to
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff <span><strong class="command">dig</strong></span> using the command-line interface.
439c0011e642fb1d26011116144af698125262dbMichael Graff The <code class="option">-m</code> option enables memory usage debugging.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff If a non-standard port number is to be queried, the
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff the port number that <span><strong class="command">dig</strong></span> will send its
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff instead of the standard DNS port number 53. This option would be used
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff to test a name server that has been configured to listen for queries
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff on a non-standard port number.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff use IPv4 query transport. The <code class="option">-6</code> option forces
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff The <code class="option">-t</code> option sets the query type to
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff <em class="parameter"><code>type</code></em>. It can be any valid query type
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff supported in BIND 9. The default query type is "A", unless the
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff <code class="option">-x</code> option is supplied to indicate a reverse lookup.
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff A zone transfer can be requested by specifying a type of AXFR. When
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff an incremental zone transfer (IXFR) is required,
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff The incremental zone transfer will contain the changes made to the zone
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff since the serial number in the zone's SOA record was
439c0011e642fb1d26011116144af698125262dbMichael Graff The <code class="option">-q</code> option sets the query name to
439c0011e642fb1d26011116144af698125262dbMichael Graff <em class="parameter"><code>name</code></em>. This useful do distinguish the
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff <em class="parameter"><code>name</code></em> from other arguments.
439c0011e642fb1d26011116144af698125262dbMichael Graff Reverse lookups — mapping addresses to names — are simplified by the
439c0011e642fb1d26011116144af698125262dbMichael Graff <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
439c0011e642fb1d26011116144af698125262dbMichael Graff address in dotted-decimal notation, or a colon-delimited IPv6 address.
439c0011e642fb1d26011116144af698125262dbMichael Graff When this option is used, there is no need to provide the
439c0011e642fb1d26011116144af698125262dbMichael Graff <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
439c0011e642fb1d26011116144af698125262dbMichael Graff <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
439c0011e642fb1d26011116144af698125262dbMichael Graff automatically performs a lookup for a name like
439c0011e642fb1d26011116144af698125262dbMichael Graff <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
439c0011e642fb1d26011116144af698125262dbMichael Graff query type and
439c0011e642fb1d26011116144af698125262dbMichael Graff class to PTR and IN respectively. By default, IPv6 addresses are
439c0011e642fb1d26011116144af698125262dbMichael Graff looked up using nibble format under the IP6.ARPA domain.
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff To use the older RFC1886 method using the IP6.INT domain
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff are now experimental and are not attempted.
439c0011e642fb1d26011116144af698125262dbMichael Graff To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
439c0011e642fb1d26011116144af698125262dbMichael Graff responses using transaction signatures (TSIG), specify a TSIG key file
439c0011e642fb1d26011116144af698125262dbMichael Graff using the <code class="option">-k</code> option. You can also specify the TSIG
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff key itself on the command line using the <code class="option">-y</code> option;
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff <em class="parameter"><code>name</code></em> is the name of the TSIG key and
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <em class="parameter"><code>key</code></em> is the actual key. The key is a
29f28fe573d4b3b318b3b026d567c1eb86738015Michael Graff encoded string, typically generated by
29f28fe573d4b3b318b3b026d567c1eb86738015Michael Graff <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
ea6228c9ce45dafa26e4cd79d71629c8ba5cd7c7Michael Graff Caution should be taken when using the <code class="option">-y</code> option on
ea6228c9ce45dafa26e4cd79d71629c8ba5cd7c7Michael Graff multi-user systems as the key can be visible in the output from
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff or in the shell's history file. When
651228967966ba4fb2e52f92d1207c790af4b130Michael Graff using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff server that is queried needs to know the key and algorithm that is
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff being used. In BIND, this is done by providing appropriate
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<p><span><strong class="command">dig</strong></span>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff provides a number of query options which affect
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff the way in which lookups are made and the results displayed. Some of
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff these set or reset flag bits in the query header, some determine which
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff sections of the answer get printed, and others determine the timeout
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff and retry strategies.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Each query option is identified by a keyword preceded by a plus sign
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff (<code class="literal">+</code>). Some keywords set or reset an
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff option. These may be preceded
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff by the string <code class="literal">no</code> to negate the meaning of
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff that keyword. Other
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff keywords assign values to options like the timeout interval. They
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff have the form <code class="option">+keyword=value</code>.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff The query options are:
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Use [do not use] TCP when querying name servers. The default
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff behavior is to use UDP unless an AXFR or IXFR query is
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff requested, in
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff which case a TCP connection is used.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Use [do not use] TCP when querying name servers. This alternate
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff syntax to <em class="parameter"><code>+[no]tcp</code></em> is
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff provided for backwards
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff compatibility. The "vc" stands for "virtual circuit".
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Ignore truncation in UDP responses instead of retrying with TCP.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff default, TCP retries are performed.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Set the search list to contain the single domain
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <em class="parameter"><code>somename</code></em>, as if specified in
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <span><strong class="command">domain</strong></span> directive in
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <code class="filename">/etc/resolv.conf</code>, and enable
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff processing as if the <em class="parameter"><code>+search</code></em>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff option were given.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="option">+[no]search</code></span></dt>
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff Use [do not use] the search list defined by the searchlist or
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff directive in <code class="filename">resolv.conf</code> (if
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff The search list is not used by default.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Perform [do not perform] a search showing intermediate
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Sets the "aa" flag in the query.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Set [do not set] the AD (authentic data) bit in the
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff query. This requests the server to return whether
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff all of the answer and authority sections have all
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff been validated as secure according to the security
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff policy of the server. AD=1 indicates that all records
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff have been validated as secure and the answer is not
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff from a OPT-OUT range. AD=0 indicate that some part
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff of the answer was insecure or not validated.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Set [do not set] the CD (checking disabled) bit in the query.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff requests the server to not perform DNSSEC validation of
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Display [do not display] the CLASS when printing the record.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Display [do not display] the TTL when printing the record.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Toggle the setting of the RD (recursion desired) bit in the
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff This bit is set by default, which means <span><strong class="command">dig</strong></span>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff normally sends recursive queries. Recursion is automatically
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff when the <em class="parameter"><code>+nssearch</code></em> or
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <em class="parameter"><code>+trace</code></em> query options are
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff When this option is set, <span><strong class="command">dig</strong></span>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff attempts to find the
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff authoritative name servers for the zone containing the name
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff looked up and display the SOA record that each name server has
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Toggle tracing of the delegation path from the root name servers
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff the name being looked up. Tracing is disabled by default. When
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff tracing is enabled, <span><strong class="command">dig</strong></span> makes
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff iterative queries to
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff resolve the name being looked up. It will follow referrals from
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff root servers, showing the answer from each server that was used
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff resolve the lookup.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Toggles the printing of the initial comment in the output
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff the version of <span><strong class="command">dig</strong></span> and the query
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff options that have
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff been applied. This comment is printed by default.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]short</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Provide a terse answer. The default is to print the answer in a
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff verbose form.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Show [or do not show] the IP address and port number that
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff answer when the <em class="parameter"><code>+short</code></em> option
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff is enabled. If
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff short form answers are requested, the default is not to show the
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff source address and port number of the server that provided the
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Toggle the display of comment lines in the output. The default
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff print comments.
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff This query option toggles the printing of statistics: when the
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff was made, the size of the reply and so on. The default
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff to print the query statistics.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Print [do not print] the query as it is sent.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff By default, the query is not printed.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]question</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Print [do not print] the question section of a query when an
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff returned. The default is to print the question section as a
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Display [do not display] the answer section of a reply. The
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff is to display it.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Display [do not display] the authority section of a reply. The
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff default is to display it.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Display [do not display] the additional section of a reply.
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff The default is to display it.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff<dt><span class="term"><code class="option">+[no]all</code></span></dt>
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff Set or clear all display flags.
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff<dt><span class="term"><code class="option">+time=T</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Sets the timeout for a query to
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff <em class="parameter"><code>T</code></em> seconds. The default
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff timeout is 5 seconds.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff An attempt to set <em class="parameter"><code>T</code></em> to less
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff than 1 will result
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff in a query timeout of 1 second being applied.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+tries=T</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Sets the number of times to try UDP queries to server to
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <em class="parameter"><code>T</code></em> instead of the default, 3.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff <em class="parameter"><code>T</code></em> is less than or equal to
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff zero, the number of
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff tries is silently rounded up to 1.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff<dt><span class="term"><code class="option">+retry=T</code></span></dt>
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff Sets the number of times to retry UDP queries to server to
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <em class="parameter"><code>T</code></em> instead of the default, 2.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff <em class="parameter"><code>+tries</code></em>, this does not include
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff Set the number of dots that have to appear in
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff considered absolute. The default value is that defined using
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff ndots statement is present. Names with fewer dots are
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff interpreted as
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff relative names and will be searched for in the domains listed in
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff <code class="option">search</code> or <code class="option">domain</code> directive in
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff <code class="filename">/etc/resolv.conf</code>.
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff Set the UDP message buffer size advertised using EDNS0 to
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff of this buffer are 65535 and 0 respectively. Values outside
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff this range are rounded up or down appropriately.
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff Values other than zero will cause a EDNS query to be sent.
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff<dt><span class="term"><code class="option">+edns=#</code></span></dt>
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff Specify the EDNS version to query with. Valid values
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff are 0 to 255. Setting the EDNS version will cause a
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff EDNS query to be sent. <code class="option">+noedns</code> clears the
439c0011e642fb1d26011116144af698125262dbMichael Graff remembered EDNS version.
439c0011e642fb1d26011116144af698125262dbMichael Graff<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
439c0011e642fb1d26011116144af698125262dbMichael Graff Print records like the SOA records in a verbose multi-line
439c0011e642fb1d26011116144af698125262dbMichael Graff format with human-readable comments. The default is to print
439c0011e642fb1d26011116144af698125262dbMichael Graff each record on a single line, to facilitate machine parsing
439c0011e642fb1d26011116144af698125262dbMichael Graff of the <span><strong class="command">dig</strong></span> output.
439c0011e642fb1d26011116144af698125262dbMichael Graff<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
439c0011e642fb1d26011116144af698125262dbMichael Graff Do not try the next server if you receive a SERVFAIL. The
439c0011e642fb1d26011116144af698125262dbMichael Graff to not try the next server which is the reverse of normal stub
439c0011e642fb1d26011116144af698125262dbMichael Graff<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
439c0011e642fb1d26011116144af698125262dbMichael Graff Attempt to display the contents of messages which are malformed.
439c0011e642fb1d26011116144af698125262dbMichael Graff The default is to not display malformed answers.
439c0011e642fb1d26011116144af698125262dbMichael Graff<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
439c0011e642fb1d26011116144af698125262dbMichael Graff Requests DNSSEC records be sent by setting the DNSSEC OK bit
439c0011e642fb1d26011116144af698125262dbMichael Graff in the OPT record in the additional section of the query.
439c0011e642fb1d26011116144af698125262dbMichael Graff<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
439c0011e642fb1d26011116144af698125262dbMichael Graff Chase DNSSEC signature chains. Requires dig be compiled with
439c0011e642fb1d26011116144af698125262dbMichael Graff -DDIG_SIGCHASE.
439c0011e642fb1d26011116144af698125262dbMichael Graff<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
439c0011e642fb1d26011116144af698125262dbMichael Graff Specifies a file containing trusted keys to be used with
439c0011e642fb1d26011116144af698125262dbMichael Graff <code class="option">+sigchase</code>. Each DNSKEY record must be
439c0011e642fb1d26011116144af698125262dbMichael Graff on its own line.
439c0011e642fb1d26011116144af698125262dbMichael Graff If not specified, <span><strong class="command">dig</strong></span> will look for
439c0011e642fb1d26011116144af698125262dbMichael Graff <code class="filename">/etc/trusted-key.key</code> then
439c0011e642fb1d26011116144af698125262dbMichael Graff <code class="filename">trusted-key.key</code> in the current directory.
439c0011e642fb1d26011116144af698125262dbMichael Graff Requires dig be compiled with -DDIG_SIGCHASE.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff When chasing DNSSEC signature chains perform a top-down
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff Requires dig be compiled with -DDIG_SIGCHASE.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff Include an EDNS name server ID request when sending a query.
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff<a name="id2632515"></a><h2>MULTIPLE QUERIES</h2>
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff The BIND 9 implementation of <span><strong class="command">dig </strong></span>
439c0011e642fb1d26011116144af698125262dbMichael Graff specifying multiple queries on the command line (in addition to
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff supporting the <code class="option">-f</code> batch file option). Each of those
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff queries can be supplied with its own set of flags, options and query
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff In this case, each <em class="parameter"><code>query</code></em> argument
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff individual query in the command-line syntax described above. Each
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff consists of any of the standard options and flags, the name to be
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff looked up, an optional query type and class and any query options that
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff should be applied to that query.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff A global set of query options, which should be applied to all queries,
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff can also be supplied. These global query options must precede the
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff first tuple of name, class, type, options, flags, and query options
439c0011e642fb1d26011116144af698125262dbMichael Graff supplied on the command line. Any global query options (except
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff the <code class="option">+[no]cmd</code> option) can be
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff overridden by a query-specific set of query options. For example:
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graffdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff shows how <span><strong class="command">dig</strong></span> could be used from the
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff reverse lookup of 127.0.0.1 and a query for the NS records of
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff A global query option of <em class="parameter"><code>+qr</code></em> is
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff that <span><strong class="command">dig</strong></span> shows the initial query it made
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff lookup. The final query has a local query option of
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff will not print the initial query when it looks up the NS records for
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff domain name) support, it can accept and display non-ASCII domain names.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff <span><strong class="command">dig</strong></span> appropriately converts character encoding of
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff domain name before sending a request to DNS server or displaying a
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff reply from the server.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff If you'd like to turn off the IDN support for some reason, defines
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff the <code class="envar">IDN_DISABLE</code> environment variable.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff The IDN support is disabled if the variable is set when
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff <span><strong class="command">dig</strong></span> runs.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff<p><code class="filename">/etc/resolv.conf</code>
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff<p><code class="filename">${HOME}/.digrc</code>
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff There are probably too many query options.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff<table width="100%" summary="Navigation footer">
439c0011e642fb1d26011116144af698125262dbMichael Graff<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
439c0011e642fb1d26011116144af698125262dbMichael Graff<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
439c0011e642fb1d26011116144af698125262dbMichael Graff<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
439c0011e642fb1d26011116144af698125262dbMichael Graff<td width="40%" align="left" valign="top">Manual pages�</td>
439c0011e642fb1d26011116144af698125262dbMichael Graff<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
439c0011e642fb1d26011116144af698125262dbMichael Graff<td width="40%" align="right" valign="top">�host</td>