man.dig.html revision a3ff24aaa545c45b8c581b2127d02d735aff8881
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - Copyright (C) 2000-2003 Internet Software Consortium.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - Permission to use, copy, modify, and/or distribute this software for any
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - purpose with or without fee is hereby granted, provided that the above
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - copyright notice and this permission notice appear in all copies.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross - PERFORMANCE OF THIS SOFTWARE.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<!-- $Id$ -->
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<link rel="next" href="man.host.html" title="host">
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<a name="man.dig"></a><div class="titlepage"></div>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<p><span><strong class="command">dig</strong></span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross (domain information groper) is a flexible tool
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross for interrogating DNS name servers. It performs DNS lookups and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross displays the answers that are returned from the name server(s) that
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross troubleshoot DNS problems because of its flexibility, ease of use and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross clarity of output. Other lookup tools tend to have less functionality
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross than <span><strong class="command">dig</strong></span>.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Although <span><strong class="command">dig</strong></span> is normally used with
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross command-line
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross arguments, it also has a batch mode of operation for reading lookup
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross requests from a file. A brief summary of its command-line arguments
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross and options is printed when the <code class="option">-h</code> option is given.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Unlike earlier versions, the BIND 9 implementation of
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross command line.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Unless it is told to query a specific name server,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> will try each of the servers listed in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross are found, <span><strong class="command">dig</strong></span> will send the query to the local
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross When no command line arguments or options are given,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="filename">${HOME}/.digrc</code>. This file is read and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross any options in it
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross are applied before the command line arguments.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The IN and CH class names overlap with the IN and CH top level
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross domain names. Either use the <code class="option">-t</code> and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="option">-c</code> options to specify the type and class,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross use the <code class="option">-q</code> the specify the domain name, or
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross use "IN." and "CH." when looking up these top level domains.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross A typical invocation of <span><strong class="command">dig</strong></span> looks like:
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<pre class="programlisting"> dig @server name type </pre>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="constant">server</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross is the name or IP address of the name server to query. This
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross can be an IPv4 address in dotted-decimal notation or an IPv6
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross address in colon-delimited notation. When the supplied
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>server</code></em> argument is a hostname,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> resolves that name before querying
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross that name server.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross If no <em class="parameter"><code>server</code></em> argument is
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross provided, <span><strong class="command">dig</strong></span> consults
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="filename">/etc/resolv.conf</code>; if an
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross address is found there, it queries the name server at
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross that address. If either of the <code class="option">-4</code> or
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="option">-6</code> options are in use, then
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross only addresses for the corresponding transport
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross will be tried. If no usable addresses are found,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> will send the query to the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross local host. The reply from the name server that
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross responds is displayed.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="constant">name</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross is the name of the resource record that is to be looked up.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="constant">type</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross indicates what type of query is required —
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross ANY, A, MX, SIG, etc.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>type</code></em> can be any valid query
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>type</code></em> argument is supplied,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> will perform a lookup for an
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The <code class="option">-b</code> option sets the source IP address of the query
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross to <em class="parameter"><code>address</code></em>. This must be a valid
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross one of the host's network interfaces or "0.0.0.0" or "::". An optional
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross may be specified by appending "#<port>"
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The default query class (IN for internet) is overridden by the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross class, such as HS for Hesiod records or CH for Chaosnet records.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross in batch mode by reading a list of lookup requests to process from the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross file <em class="parameter"><code>filename</code></em>. The file contains a
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross queries, one per line. Each entry in the file should be organized in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross the same way they would be presented as queries to
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> using the command-line interface.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The <code class="option">-m</code> option enables memory usage debugging.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross If a non-standard port number is to be queried, the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross the port number that <span><strong class="command">dig</strong></span> will send its
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross instead of the standard DNS port number 53. This option would be used
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross to test a name server that has been configured to listen for queries
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross on a non-standard port number.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross use IPv4 query transport. The <code class="option">-6</code> option forces
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The <code class="option">-t</code> option sets the query type to
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>type</code></em>. It can be any valid query type
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross supported in BIND 9. The default query type is "A", unless the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="option">-x</code> option is supplied to indicate a reverse lookup.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross A zone transfer can be requested by specifying a type of AXFR. When
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross an incremental zone transfer (IXFR) is required,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The incremental zone transfer will contain the changes made to the zone
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross since the serial number in the zone's SOA record was
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The <code class="option">-q</code> option sets the query name to
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>name</code></em>. This is useful to distinguish the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>name</code></em> from other arguments.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The <code class="option">-v</code> causes <span><strong class="command">dig</strong></span> to
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross print the version number and exit.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Reverse lookups — mapping addresses to names — are simplified by the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross address in dotted-decimal notation, or a colon-delimited IPv6 address.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross When this option is used, there is no need to provide the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross automatically performs a lookup for a name like
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross query type and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross class to PTR and IN respectively. By default, IPv6 addresses are
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross looked up using nibble format under the IP6.ARPA domain.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross To use the older RFC1886 method using the IP6.INT domain
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross are now experimental and are not attempted.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross responses using transaction signatures (TSIG), specify a TSIG key file
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross using the <code class="option">-k</code> option. You can also specify the TSIG
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross key itself on the command line using the <code class="option">-y</code> option;
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>name</code></em> is the name of the TSIG key and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>key</code></em> is the actual key. The key is a
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross encoded string, typically generated by
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Caution should be taken when using the <code class="option">-y</code> option on
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross multi-user systems as the key can be visible in the output from
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross or in the shell's history file. When
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross server that is queried needs to know the key and algorithm that is
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross being used. In BIND, this is done by providing appropriate
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<p><span><strong class="command">dig</strong></span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross provides a number of query options which affect
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross the way in which lookups are made and the results displayed. Some of
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross these set or reset flag bits in the query header, some determine which
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross sections of the answer get printed, and others determine the timeout
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross and retry strategies.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Each query option is identified by a keyword preceded by a plus sign
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross (<code class="literal">+</code>). Some keywords set or reset an
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross option. These may be preceded
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross by the string <code class="literal">no</code> to negate the meaning of
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross that keyword. Other
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross keywords assign values to options like the timeout interval. They
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross have the form <code class="option">+keyword=value</code>.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The query options are:
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Sets the "aa" flag in the query.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Display [do not display] the additional section of a
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross reply. The default is to display it.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Set [do not set] the AD (authentic data) bit in the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross query. This requests the server to return whether
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross all of the answer and authority sections have all
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross been validated as secure according to the security
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross policy of the server. AD=1 indicates that all records
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross have been validated as secure and the answer is not
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross from a OPT-OUT range. AD=0 indicate that some part
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross of the answer was insecure or not validated. This
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross bit is set by default.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]all</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Set or clear all display flags.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Display [do not display] the answer section of a
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross reply. The default is to display it.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Display [do not display] the authority section of a
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross reply. The default is to display it.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Attempt to display the contents of messages which are
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross malformed. The default is to not display malformed
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Set the UDP message buffer size advertised using EDNS0
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross to <em class="parameter"><code>B</code></em> bytes. The maximum and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross minimum sizes of this buffer are 65535 and 0 respectively.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Values outside this range are rounded up or down
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross appropriately. Values other than zero will cause a
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross EDNS query to be sent.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Set [do not set] the CD (checking disabled) bit in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross the query. This requests the server to not perform
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross DNSSEC validation of responses.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Display [do not display] the CLASS when printing the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Toggles the printing of the initial comment in the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross output identifying the version of <span><strong class="command">dig</strong></span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross and the query options that have been applied. This
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross comment is printed by default.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Toggle the display of comment lines in the output.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The default is to print comments.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Toggle the display of cryptographic fields in DNSSEC
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross records. The contents of these field are unnecessary
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross to debug most DNSSEC validation failures and removing
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross them makes it easier to see the common failures. The
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross default is to display the fields. When omitted they
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross are replaced by the string "[omitted]" or in the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross DNSKEY case the key id is displayed as the replacement,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross e.g. "[ key id = value ]".
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Deprecated, treated as a synonym for
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>+[no]search</code></em>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Requests DNSSEC records be sent by setting the DNSSEC
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross OK bit (DO) in the OPT record in the additional section
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross of the query.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Set the search list to contain the single domain
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>somename</code></em>, as if specified in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross a <span><strong class="command">domain</strong></span> directive in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="filename">/etc/resolv.conf</code>, and enable
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross search list processing as if the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>+search</code></em> option were given.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Set the DSCP code point to be used when sending the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross query. Valid DSCP code points are in the range
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross [0..63]. By default no code point is explicitly set.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Specify the EDNS version to query with. Valid values
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross are 0 to 255. Setting the EDNS version will cause
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross a EDNS query to be sent. <code class="option">+noedns</code>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross clears the remembered EDNS version. EDNS is set to
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross 0 by default.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Set the must-be-zero EDNS flags bits (Z bits) to the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross specified value. Decimal, hex and octal encodings are
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross accepted. Setting a named flag (e.g. DO) will silently be
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross ignored. By default, no Z bits are set.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Specify EDNS option with code point <code class="option">code</code>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross and optionally payload of <code class="option">value</code> as a
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross hexadecimal string. <code class="option">+noednsopt</code>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross clears the EDNS options to be sent.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Send an EDNS Expire option.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Do not try the next server if you receive a SERVFAIL.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The default is to not try the next server which is
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross the reverse of normal stub resolver behavior.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]header-only</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Send a query with a DNS header without a question section.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross The default is to add a question section. The query type
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross and query name are ignored when this is set.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Show [or do not show] the IP address and port number
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross that supplied the answer when the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>+short</code></em> option is enabled. If
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross short form answers are requested, the default is not
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross to show the source address and port number of the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross server that provided the answer.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Ignore truncation in UDP responses instead of retrying
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross with TCP. By default, TCP retries are performed.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Keep the TCP socket open between queries and reuse
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross it rather than creating a new TCP socket for each
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross lookup. The default is <code class="option">+nokeepopen</code>.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Print records like the SOA records in a verbose
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross multi-line format with human-readable comments. The
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross default is to print each record on a single line, to
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross facilitate machine parsing of the <span><strong class="command">dig</strong></span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Set the number of dots that have to appear in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross for it to be considered absolute. The default value
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross is that defined using the ndots statement in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="filename">/etc/resolv.conf</code>, or 1 if no
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross ndots statement is present. Names with fewer dots
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross are interpreted as relative names and will be searched
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross for in the domains listed in the <code class="option">search</code>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross or <code class="option">domain</code> directive in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="filename">/etc/resolv.conf</code> if
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Include an EDNS name server ID request when sending
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross When this option is set, <span><strong class="command">dig</strong></span>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross attempts to find the authoritative name servers for
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross the zone containing the name being looked up and
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross display the SOA record that each name server has for
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Print only one (starting) SOA record when performing
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross an AXFR. The default is to print both the starting
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross and ending SOA records.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Print [do not print] the query as it is sent. By
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross default, the query is not printed.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]question</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Print [do not print] the question section of a query
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross when an answer is returned. The default is to print
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross the question section as a comment.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Toggle the setting of the RD (recursion desired) bit
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross in the query. This bit is set by default, which means
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <span><strong class="command">dig</strong></span> normally sends recursive
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross queries. Recursion is automatically disabled when
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross the <em class="parameter"><code>+nssearch</code></em> or
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <em class="parameter"><code>+trace</code></em> query options are used.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+retry=T</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Sets the number of times to retry UDP queries to
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross server to <em class="parameter"><code>T</code></em> instead of the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross this does not include the initial query.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Toggle the display of per-record comments in the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross output (for example, human-readable key information
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross about DNSKEY records). The default is not to print
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross record comments unless multiline mode is active.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]search</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Use [do not use] the search list defined by the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross searchlist or domain directive in
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross <code class="filename">resolv.conf</code> (if any). The search
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross list is not used by default.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross 'ndots' from <code class="filename">resolv.conf</code> (default 1)
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross which may be overridden by <em class="parameter"><code>+ndots</code></em>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross determines if the name will be treated as relative
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross or not and hence whether a search is eventually
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross performed or not.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]short</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Provide a terse answer. The default is to print the
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross answer in a verbose form.
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Perform [do not perform] a search showing intermediate
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross Chase DNSSEC signature chains. Requires dig be
b819cea2f73f98c5662230cc9affc8cc84f77fcfGordon Ross compiled with -DDIG_SIGCHASE.
<dt><span class="term"><code class="option">+[no]sit[<span class="optional">=####</span>]</code></span></dt>