man.dig.html revision e9ed929fd1a190f29391be9c7ae324e7e56ff9c9
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - Copyright (C) 2000-2003 Internet Software Consortium.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - Permission to use, copy, modify, and/or distribute this software for any
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - purpose with or without fee is hereby granted, provided that the above
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - copyright notice and this permission notice appear in all copies.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
3db86aab554edbb4244c8d1a1c90f152eee768afstevel - PERFORMANCE OF THIS SOFTWARE.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<!-- $Id$ -->
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<link rel="prev" href="Bv9ARM.ch13.html" title="Manual pages">
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel (domain information groper) is a flexible tool
3db86aab554edbb4244c8d1a1c90f152eee768afstevel for interrogating DNS name servers. It performs DNS lookups and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel displays the answers that are returned from the name server(s) that
3db86aab554edbb4244c8d1a1c90f152eee768afstevel were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel troubleshoot DNS problems because of its flexibility, ease of use and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel clarity of output. Other lookup tools tend to have less functionality
3db86aab554edbb4244c8d1a1c90f152eee768afstevel than <span><strong class="command">dig</strong></span>.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Although <span><strong class="command">dig</strong></span> is normally used with
3db86aab554edbb4244c8d1a1c90f152eee768afstevel command-line
3db86aab554edbb4244c8d1a1c90f152eee768afstevel arguments, it also has a batch mode of operation for reading lookup
3db86aab554edbb4244c8d1a1c90f152eee768afstevel requests from a file. A brief summary of its command-line arguments
3db86aab554edbb4244c8d1a1c90f152eee768afstevel and options is printed when the <code class="option">-h</code> option is given.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Unlike earlier versions, the BIND 9 implementation of
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
3db86aab554edbb4244c8d1a1c90f152eee768afstevel command line.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Unless it is told to query a specific name server,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> will try each of the servers listed in
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
3db86aab554edbb4244c8d1a1c90f152eee768afstevel are found, <span><strong class="command">dig</strong></span> will send the query to the local
3db86aab554edbb4244c8d1a1c90f152eee768afstevel When no command line arguments or options are given,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
3db86aab554edbb4244c8d1a1c90f152eee768afstevel It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="filename">${HOME}/.digrc</code>. This file is read and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel any options in it
3db86aab554edbb4244c8d1a1c90f152eee768afstevel are applied before the command line arguments.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The IN and CH class names overlap with the IN and CH top level
3db86aab554edbb4244c8d1a1c90f152eee768afstevel domain names. Either use the <code class="option">-t</code> and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="option">-c</code> options to specify the type and class,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel use the <code class="option">-q</code> the specify the domain name, or
3db86aab554edbb4244c8d1a1c90f152eee768afstevel use "IN." and "CH." when looking up these top level domains.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel A typical invocation of <span><strong class="command">dig</strong></span> looks like:
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<pre class="programlisting"> dig @server name type </pre>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="constant">server</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel is the name or IP address of the name server to query. This
3db86aab554edbb4244c8d1a1c90f152eee768afstevel can be an IPv4 address in dotted-decimal notation or an IPv6
3db86aab554edbb4244c8d1a1c90f152eee768afstevel address in colon-delimited notation. When the supplied
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>server</code></em> argument is a hostname,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> resolves that name before querying
3db86aab554edbb4244c8d1a1c90f152eee768afstevel that name server.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel If no <em class="parameter"><code>server</code></em> argument is
3db86aab554edbb4244c8d1a1c90f152eee768afstevel provided, <span><strong class="command">dig</strong></span> consults
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="filename">/etc/resolv.conf</code>; if an
3db86aab554edbb4244c8d1a1c90f152eee768afstevel address is found there, it queries the name server at
3db86aab554edbb4244c8d1a1c90f152eee768afstevel that address. If either of the <code class="option">-4</code> or
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="option">-6</code> options are in use, then
3db86aab554edbb4244c8d1a1c90f152eee768afstevel only addresses for the corresponding transport
3db86aab554edbb4244c8d1a1c90f152eee768afstevel will be tried. If no usable addresses are found,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> will send the query to the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel local host. The reply from the name server that
3db86aab554edbb4244c8d1a1c90f152eee768afstevel responds is displayed.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="constant">name</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel is the name of the resource record that is to be looked up.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="constant">type</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel indicates what type of query is required —
3db86aab554edbb4244c8d1a1c90f152eee768afstevel ANY, A, MX, SIG, etc.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>type</code></em> can be any valid query
3db86aab554edbb4244c8d1a1c90f152eee768afstevel type. If no
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>type</code></em> argument is supplied,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> will perform a lookup for an
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Use IPv4 only.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Use IPv6 only.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-b <em class="replaceable"><code>address[<span class="optional">#port</span>]</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set the source IP address of the query.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The <em class="parameter"><code>address</code></em> must be a valid address on
3db86aab554edbb4244c8d1a1c90f152eee768afstevel one of the host's network interfaces, or "0.0.0.0" or "::". An
3db86aab554edbb4244c8d1a1c90f152eee768afstevel optional port may be specified by appending "#<port>"
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set the query class. The
3db86aab554edbb4244c8d1a1c90f152eee768afstevel default <em class="parameter"><code>class</code></em> is IN; other classes
3db86aab554edbb4244c8d1a1c90f152eee768afstevel are HS for Hesiod records or CH for Chaosnet records.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Batch mode: <span><strong class="command">dig</strong></span> reads a list of lookup
3db86aab554edbb4244c8d1a1c90f152eee768afstevel requests to process from the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel given <em class="parameter"><code>file</code></em>. Each line in the file
3db86aab554edbb4244c8d1a1c90f152eee768afstevel should be organized in the same way they would be
3db86aab554edbb4244c8d1a1c90f152eee768afstevel presented as queries to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> using the command-line interface.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Do reverse IPv6 lookups using the obsolete RFC1886 IP6.INT
3db86aab554edbb4244c8d1a1c90f152eee768afstevel domain, which is no longer in use. Obsolete bit string
3db86aab554edbb4244c8d1a1c90f152eee768afstevel label queries (RFC2874) are not attempted.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-k <em class="replaceable"><code>keyfile</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Sign queries using TSIG using a key read from the given file.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Key files can be generated using
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span class="citerefentry"><span class="refentrytitle">tsig-keygen</span>(8)</span>.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel When using TSIG authentication with <span><strong class="command">dig</strong></span>,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the name server that is queried needs to know the key and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel algorithm that is being used. In BIND, this is done by
3db86aab554edbb4244c8d1a1c90f152eee768afstevel providing appropriate <span><strong class="command">key</strong></span>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel and <span><strong class="command">server</strong></span> statements in
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Enable memory usage debugging.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Send the query to a non-standard port on the server,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel instead of the defaut port 53. This option would be used
3db86aab554edbb4244c8d1a1c90f152eee768afstevel to test a name server that has been configured to listen
3db86aab554edbb4244c8d1a1c90f152eee768afstevel for queries on a non-standard port number.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-q <em class="replaceable"><code>name</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The domain name to query. This is useful to distinguish
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the <em class="parameter"><code>name</code></em> from other arguments.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The resource record type to query. It can be any valid query type
3db86aab554edbb4244c8d1a1c90f152eee768afstevel supported in BIND 9. The default query type is "A", unless the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="option">-x</code> option is supplied to indicate a reverse lookup.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel A zone transfer can be requested by specifying a type of AXFR. When
3db86aab554edbb4244c8d1a1c90f152eee768afstevel an incremental zone transfer (IXFR) is required, set the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>type</code></em> to <code class="literal">ixfr=N</code>.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The incremental zone transfer will contain the changes
3db86aab554edbb4244c8d1a1c90f152eee768afstevel made to the zone since the serial number in the zone's SOA
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Print the version number and exit.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-x <em class="replaceable"><code>addr</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Simplified reverse lookups, for mapping addresses to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel names. The <em class="parameter"><code>addr</code></em> is an IPv4 address
3db86aab554edbb4244c8d1a1c90f152eee768afstevel in dotted-decimal notation, or a colon-delimited IPv6
3db86aab554edbb4244c8d1a1c90f152eee768afstevel address. When the <code class="option">-x</code> is used, there is no
3db86aab554edbb4244c8d1a1c90f152eee768afstevel need to provide
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel arguments. <span><strong class="command">dig</strong></span> automatically performs a
3db86aab554edbb4244c8d1a1c90f152eee768afstevel lookup for a name like
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="literal">94.2.0.192.in-addr.arpa</code> and sets the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel query type and class to PTR and IN respectively. IPv6
3db86aab554edbb4244c8d1a1c90f152eee768afstevel addresses are looked up using nibble format under the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel IP6.ARPA domain (but see also the <code class="option">-i</code>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Sign queries using TSIG with the given authentication key.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>keyname</code></em> is the name of the key, and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>secret</code></em> is the base64 encoded shared secret.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>hmac</code></em> is the name of the key algorithm;
3db86aab554edbb4244c8d1a1c90f152eee768afstevel valid choices are <code class="literal">hmac-md5</code>,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code>, or
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="literal">hmac-sha512</code>. If <em class="parameter"><code>hmac</code></em>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel is not specified, the default is <code class="literal">hmac-md5</code>.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel NOTE: You should use the <code class="option">-k</code> option and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel avoid the <code class="option">-y</code> option, because
3db86aab554edbb4244c8d1a1c90f152eee768afstevel with <code class="option">-y</code> the shared secret is supplied as
3db86aab554edbb4244c8d1a1c90f152eee768afstevel a command line argument in clear text. This may be visible
3db86aab554edbb4244c8d1a1c90f152eee768afstevel in the output from
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel or in a history file maintained by the user's shell.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel provides a number of query options which affect
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the way in which lookups are made and the results displayed. Some of
3db86aab554edbb4244c8d1a1c90f152eee768afstevel these set or reset flag bits in the query header, some determine which
3db86aab554edbb4244c8d1a1c90f152eee768afstevel sections of the answer get printed, and others determine the timeout
3db86aab554edbb4244c8d1a1c90f152eee768afstevel and retry strategies.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Each query option is identified by a keyword preceded by a plus sign
3db86aab554edbb4244c8d1a1c90f152eee768afstevel (<code class="literal">+</code>). Some keywords set or reset an
3db86aab554edbb4244c8d1a1c90f152eee768afstevel option. These may be preceded
3db86aab554edbb4244c8d1a1c90f152eee768afstevel by the string <code class="literal">no</code> to negate the meaning of
3db86aab554edbb4244c8d1a1c90f152eee768afstevel that keyword. Other
3db86aab554edbb4244c8d1a1c90f152eee768afstevel keywords assign values to options like the timeout interval. They
3db86aab554edbb4244c8d1a1c90f152eee768afstevel have the form <code class="option">+keyword=value</code>.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The query options are:
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Sets the "aa" flag in the query.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Display [do not display] the additional section of a
3db86aab554edbb4244c8d1a1c90f152eee768afstevel reply. The default is to display it.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set [do not set] the AD (authentic data) bit in the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel query. This requests the server to return whether
3db86aab554edbb4244c8d1a1c90f152eee768afstevel all of the answer and authority sections have all
3db86aab554edbb4244c8d1a1c90f152eee768afstevel been validated as secure according to the security
3db86aab554edbb4244c8d1a1c90f152eee768afstevel policy of the server. AD=1 indicates that all records
3db86aab554edbb4244c8d1a1c90f152eee768afstevel have been validated as secure and the answer is not
3db86aab554edbb4244c8d1a1c90f152eee768afstevel from a OPT-OUT range. AD=0 indicate that some part
3db86aab554edbb4244c8d1a1c90f152eee768afstevel of the answer was insecure or not validated. This
3db86aab554edbb4244c8d1a1c90f152eee768afstevel bit is set by default.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]all</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set or clear all display flags.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Display [do not display] the answer section of a
3db86aab554edbb4244c8d1a1c90f152eee768afstevel reply. The default is to display it.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Display [do not display] the authority section of a
3db86aab554edbb4244c8d1a1c90f152eee768afstevel reply. The default is to display it.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Attempt to display the contents of messages which are
3db86aab554edbb4244c8d1a1c90f152eee768afstevel malformed. The default is to not display malformed
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set the UDP message buffer size advertised using EDNS0
3db86aab554edbb4244c8d1a1c90f152eee768afstevel to <em class="parameter"><code>B</code></em> bytes. The maximum and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel minimum sizes of this buffer are 65535 and 0 respectively.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Values outside this range are rounded up or down
3db86aab554edbb4244c8d1a1c90f152eee768afstevel appropriately. Values other than zero will cause a
3db86aab554edbb4244c8d1a1c90f152eee768afstevel EDNS query to be sent.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set [do not set] the CD (checking disabled) bit in
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the query. This requests the server to not perform
3db86aab554edbb4244c8d1a1c90f152eee768afstevel DNSSEC validation of responses.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Display [do not display] the CLASS when printing the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Toggles the printing of the initial comment in the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel output identifying the version of <span><strong class="command">dig</strong></span>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel and the query options that have been applied. This
3db86aab554edbb4244c8d1a1c90f152eee768afstevel comment is printed by default.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Toggle the display of comment lines in the output.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The default is to print comments.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Toggle the display of cryptographic fields in DNSSEC
3db86aab554edbb4244c8d1a1c90f152eee768afstevel records. The contents of these field are unnecessary
3db86aab554edbb4244c8d1a1c90f152eee768afstevel to debug most DNSSEC validation failures and removing
3db86aab554edbb4244c8d1a1c90f152eee768afstevel them makes it easier to see the common failures. The
3db86aab554edbb4244c8d1a1c90f152eee768afstevel default is to display the fields. When omitted they
3db86aab554edbb4244c8d1a1c90f152eee768afstevel are replaced by the string "[omitted]" or in the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel DNSKEY case the key id is displayed as the replacement,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel e.g. "[ key id = value ]".
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Deprecated, treated as a synonym for
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Requests DNSSEC records be sent by setting the DNSSEC
3db86aab554edbb4244c8d1a1c90f152eee768afstevel OK bit (DO) in the OPT record in the additional section
3db86aab554edbb4244c8d1a1c90f152eee768afstevel of the query.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set the search list to contain the single domain
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>somename</code></em>, as if specified in
3db86aab554edbb4244c8d1a1c90f152eee768afstevel a <span><strong class="command">domain</strong></span> directive in
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="filename">/etc/resolv.conf</code>, and enable
3db86aab554edbb4244c8d1a1c90f152eee768afstevel search list processing as if the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>+search</code></em> option were given.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+dscp=value</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set the DSCP code point to be used when sending the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel query. Valid DSCP code points are in the range
3db86aab554edbb4244c8d1a1c90f152eee768afstevel [0..63]. By default no code point is explicitly set.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Specify the EDNS version to query with. Valid values
3db86aab554edbb4244c8d1a1c90f152eee768afstevel are 0 to 255. Setting the EDNS version will cause
3db86aab554edbb4244c8d1a1c90f152eee768afstevel a EDNS query to be sent. <code class="option">+noedns</code>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel clears the remembered EDNS version. EDNS is set to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel 0 by default.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set the must-be-zero EDNS flags bits (Z bits) to the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel specified value. Decimal, hex and octal encodings are
3db86aab554edbb4244c8d1a1c90f152eee768afstevel accepted. Setting a named flag (e.g. DO) will silently be
3db86aab554edbb4244c8d1a1c90f152eee768afstevel ignored. By default, no Z bits are set.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]ednsnegotiation</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Enable / disable EDNS version negotiation. By default
3db86aab554edbb4244c8d1a1c90f152eee768afstevel EDNS version negotiation is enabled.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Specify EDNS option with code point <code class="option">code</code>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel and optionally payload of <code class="option">value</code> as a
3db86aab554edbb4244c8d1a1c90f152eee768afstevel hexadecimal string. <code class="option">+noednsopt</code>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel clears the EDNS options to be sent.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Send an EDNS Expire option.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Do not try the next server if you receive a SERVFAIL.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The default is to not try the next server which is
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the reverse of normal stub resolver behavior.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]header-only</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Send a query with a DNS header without a question section.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The default is to add a question section. The query type
3db86aab554edbb4244c8d1a1c90f152eee768afstevel and query name are ignored when this is set.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Show [or do not show] the IP address and port number
3db86aab554edbb4244c8d1a1c90f152eee768afstevel that supplied the answer when the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>+short</code></em> option is enabled. If
3db86aab554edbb4244c8d1a1c90f152eee768afstevel short form answers are requested, the default is not
3db86aab554edbb4244c8d1a1c90f152eee768afstevel to show the source address and port number of the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel server that provided the answer.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Ignore truncation in UDP responses instead of retrying
3db86aab554edbb4244c8d1a1c90f152eee768afstevel with TCP. By default, TCP retries are performed.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Keep the TCP socket open between queries and reuse
3db86aab554edbb4244c8d1a1c90f152eee768afstevel it rather than creating a new TCP socket for each
3db86aab554edbb4244c8d1a1c90f152eee768afstevel lookup. The default is <code class="option">+nokeepopen</code>.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Print records like the SOA records in a verbose
3db86aab554edbb4244c8d1a1c90f152eee768afstevel multi-line format with human-readable comments. The
3db86aab554edbb4244c8d1a1c90f152eee768afstevel default is to print each record on a single line, to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel facilitate machine parsing of the <span><strong class="command">dig</strong></span>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set the number of dots that have to appear in
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel for it to be considered absolute. The default value
3db86aab554edbb4244c8d1a1c90f152eee768afstevel is that defined using the ndots statement in
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="filename">/etc/resolv.conf</code>, or 1 if no
3db86aab554edbb4244c8d1a1c90f152eee768afstevel ndots statement is present. Names with fewer dots
3db86aab554edbb4244c8d1a1c90f152eee768afstevel are interpreted as relative names and will be searched
3db86aab554edbb4244c8d1a1c90f152eee768afstevel for in the domains listed in the <code class="option">search</code>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Include an EDNS name server ID request when sending
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel When this option is set, <span><strong class="command">dig</strong></span>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel attempts to find the authoritative name servers for
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the zone containing the name being looked up and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel display the SOA record that each name server has for
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Print only one (starting) SOA record when performing
3db86aab554edbb4244c8d1a1c90f152eee768afstevel an AXFR. The default is to print both the starting
3db86aab554edbb4244c8d1a1c90f152eee768afstevel and ending SOA records.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]opcode=value</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set [restore] the DNS message opcode to the specified
3db86aab554edbb4244c8d1a1c90f152eee768afstevel value. The default value is QUERY (0).
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Print [do not print] the query as it is sent. By
3db86aab554edbb4244c8d1a1c90f152eee768afstevel default, the query is not printed.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]question</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Print [do not print] the question section of a query
3db86aab554edbb4244c8d1a1c90f152eee768afstevel when an answer is returned. The default is to print
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the question section as a comment.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Toggle the setting of the RD (recursion desired) bit
3db86aab554edbb4244c8d1a1c90f152eee768afstevel in the query. This bit is set by default, which means
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> normally sends recursive
3db86aab554edbb4244c8d1a1c90f152eee768afstevel queries. Recursion is automatically disabled when
3db86aab554edbb4244c8d1a1c90f152eee768afstevel the <em class="parameter"><code>+nssearch</code></em> or
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>+trace</code></em> query options are used.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+retry=T</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Sets the number of times to retry UDP queries to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel server to <em class="parameter"><code>T</code></em> instead of the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel this does not include the initial query.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Toggle the display of per-record comments in the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel output (for example, human-readable key information
3db86aab554edbb4244c8d1a1c90f152eee768afstevel about DNSKEY records). The default is not to print
3db86aab554edbb4244c8d1a1c90f152eee768afstevel record comments unless multiline mode is active.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]search</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Use [do not use] the search list defined by the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel searchlist or domain directive in
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="filename">resolv.conf</code> (if any). The search
3db86aab554edbb4244c8d1a1c90f152eee768afstevel list is not used by default.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel 'ndots' from <code class="filename">resolv.conf</code> (default 1)
3db86aab554edbb4244c8d1a1c90f152eee768afstevel which may be overridden by <em class="parameter"><code>+ndots</code></em>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel determines if the name will be treated as relative
3db86aab554edbb4244c8d1a1c90f152eee768afstevel or not and hence whether a search is eventually
3db86aab554edbb4244c8d1a1c90f152eee768afstevel performed or not.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]short</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Provide a terse answer. The default is to print the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel answer in a verbose form.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Perform [do not perform] a search showing intermediate
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Chase DNSSEC signature chains. Requires dig be
3db86aab554edbb4244c8d1a1c90f152eee768afstevel compiled with -DDIG_SIGCHASE.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]sit[<span class="optional">=####</span>]</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Send a Source Identity Token EDNS option, with optional
3db86aab554edbb4244c8d1a1c90f152eee768afstevel value. Replaying a SIT from a previous response will
3db86aab554edbb4244c8d1a1c90f152eee768afstevel allow the server to identify a previous client. The
3db86aab554edbb4244c8d1a1c90f152eee768afstevel default is <code class="option">+nosit</code>. Currently using
3db86aab554edbb4244c8d1a1c90f152eee768afstevel experimental value 65001 for the option code.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+split=W</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Split long hex- or base64-formatted fields in resource
3db86aab554edbb4244c8d1a1c90f152eee768afstevel records into chunks of <em class="parameter"><code>W</code></em>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel characters (where <em class="parameter"><code>W</code></em> is rounded
3db86aab554edbb4244c8d1a1c90f152eee768afstevel up to the nearest multiple of 4).
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>+split=0</code></em> causes fields not to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel be split at all. The default is 56 characters, or
3db86aab554edbb4244c8d1a1c90f152eee768afstevel 44 characters when multiline mode is active.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel This query option toggles the printing of statistics:
3db86aab554edbb4244c8d1a1c90f152eee768afstevel when the query was made, the size of the reply and
3db86aab554edbb4244c8d1a1c90f152eee768afstevel so on. The default behavior is to print the query
3db86aab554edbb4244c8d1a1c90f152eee768afstevel statistics.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Send an EDNS Client Subnet option with the specified
3db86aab554edbb4244c8d1a1c90f152eee768afstevel IP address or network prefix.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Use [do not use] TCP when querying name servers. The
3db86aab554edbb4244c8d1a1c90f152eee768afstevel default behavior is to use UDP unless an
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="literal">ixfr=N</code> query is requested, in which
3db86aab554edbb4244c8d1a1c90f152eee768afstevel case the default is TCP. AXFR queries always use
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+timeout=T</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Sets the timeout for a query to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <em class="parameter"><code>T</code></em> seconds. The default
3db86aab554edbb4244c8d1a1c90f152eee768afstevel timeout is 5 seconds.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel An attempt to set <em class="parameter"><code>T</code></em> to less
3db86aab554edbb4244c8d1a1c90f152eee768afstevel than 1 will result
3db86aab554edbb4244c8d1a1c90f152eee768afstevel in a query timeout of 1 second being applied.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel When chasing DNSSEC signature chains perform a top-down
3db86aab554edbb4244c8d1a1c90f152eee768afstevel validation. Requires dig be compiled with -DDIG_SIGCHASE.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Toggle tracing of the delegation path from the root
3db86aab554edbb4244c8d1a1c90f152eee768afstevel name servers for the name being looked up. Tracing
3db86aab554edbb4244c8d1a1c90f152eee768afstevel is disabled by default. When tracing is enabled,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">dig</strong></span> makes iterative queries to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel resolve the name being looked up. It will follow
3db86aab554edbb4244c8d1a1c90f152eee768afstevel referrals from the root servers, showing the answer
3db86aab554edbb4244c8d1a1c90f152eee768afstevel from each server that was used to resolve the lookup.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <span><strong class="command">+dnssec</strong></span> is also set when +trace
3db86aab554edbb4244c8d1a1c90f152eee768afstevel is set to better emulate the default queries from a
3db86aab554edbb4244c8d1a1c90f152eee768afstevel nameserver.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+tries=T</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Sets the number of times to try UDP queries to server
3db86aab554edbb4244c8d1a1c90f152eee768afstevel to <em class="parameter"><code>T</code></em> instead of the default,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel 3. If <em class="parameter"><code>T</code></em> is less than or equal
3db86aab554edbb4244c8d1a1c90f152eee768afstevel to zero, the number of tries is silently rounded up
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Specifies a file containing trusted keys to be used
3db86aab554edbb4244c8d1a1c90f152eee768afstevel with <code class="option">+sigchase</code>. Each DNSKEY record
3db86aab554edbb4244c8d1a1c90f152eee768afstevel must be on its own line.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel If not specified, <span><strong class="command">dig</strong></span> will look
3db86aab554edbb4244c8d1a1c90f152eee768afstevel for <code class="filename">/etc/trusted-key.key</code> then
3db86aab554edbb4244c8d1a1c90f152eee768afstevel <code class="filename">trusted-key.key</code> in the current
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Requires dig be compiled with -DDIG_SIGCHASE.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Display [do not display] the TTL when printing the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
0d282d1376eb7ba06504448622a6d65726e4bd3erw Display [do not display] the TTL in friendly human-readable
0d282d1376eb7ba06504448622a6d65726e4bd3erw time units of "s", "m", "h", "d", and "w", representing
3db86aab554edbb4244c8d1a1c90f152eee768afstevel seconds, minutes, hours, days and weeks. Implies +ttlid.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Use [do not use] TCP when querying name servers. This
3db86aab554edbb4244c8d1a1c90f152eee768afstevel alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel is provided for backwards compatibility. The "vc"
3db86aab554edbb4244c8d1a1c90f152eee768afstevel stands for "virtual circuit".
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel Set [do not set] the last unassigned DNS header flag in a
3db86aab554edbb4244c8d1a1c90f152eee768afstevel DNS query. This flag is off by default.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel The BIND 9 implementation of <span><strong class="command">dig </strong></span>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel specifying multiple queries on the command line (in addition to
3db86aab554edbb4244c8d1a1c90f152eee768afstevel supporting the <code class="option">-f</code> batch file option). Each of those
3db86aab554edbb4244c8d1a1c90f152eee768afstevel queries can be supplied with its own set of flags, options and query
3db86aab554edbb4244c8d1a1c90f152eee768afstevel In this case, each <em class="parameter"><code>query</code></em> argument
3db86aab554edbb4244c8d1a1c90f152eee768afstevel represent an
3db86aab554edbb4244c8d1a1c90f152eee768afstevel individual query in the command-line syntax described above. Each
3db86aab554edbb4244c8d1a1c90f152eee768afstevel consists of any of the standard options and flags, the name to be
3db86aab554edbb4244c8d1a1c90f152eee768afstevel looked up, an optional query type and class and any query options that
3db86aab554edbb4244c8d1a1c90f152eee768afstevel should be applied to that query.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel A global set of query options, which should be applied to all queries,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel can also be supplied. These global query options must precede the
3db86aab554edbb4244c8d1a1c90f152eee768afstevel first tuple of name, class, type, options, flags, and query options
3db86aab554edbb4244c8d1a1c90f152eee768afstevel supplied on the command line. Any global query options (except
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw overridden by a query-specific set of query options. For example:
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw shows how <span><strong class="command">dig</strong></span> could be used from the
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw command line
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw reverse lookup of 127.0.0.1 and a query for the NS records of
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw A global query option of <em class="parameter"><code>+qr</code></em> is
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw applied, so
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw that <span><strong class="command">dig</strong></span> shows the initial query it made
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw lookup. The final query has a local query option of
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw will not print the initial query when it looks up the NS records for
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw domain name) support, it can accept and display non-ASCII domain names.
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw <span><strong class="command">dig</strong></span> appropriately converts character encoding of
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw domain name before sending a request to DNS server or displaying a
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw reply from the server.
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw If you'd like to turn off the IDN support for some reason, defines
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw the <code class="envar">IDN_DISABLE</code> environment variable.
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw The IDN support is disabled if the variable is set when
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
11c2b4c0e543fe2e1e5910cde1f4422cc3218160rw <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
3db86aab554edbb4244c8d1a1c90f152eee768afstevel There are probably too many query options.
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<a accesskey="p" href="Bv9ARM.ch13.html">Prev</a>�</td>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<td width="40%" align="left" valign="top">Manual pages�</td>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
3db86aab554edbb4244c8d1a1c90f152eee768afstevel<p style="text-align: center;">BIND 9.11.0pre-alpha</p>