man.dig.html revision f5c27ecceb6dcba6ad8b75172fe5f9823d7a6d42
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Copyright (C) 2000-2003 Internet Software Consortium.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Permission to use, copy, modify, and/or distribute this software for any
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - purpose with or without fee is hereby granted, provided that the above
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - copyright notice and this permission notice appear in all copies.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - PERFORMANCE OF THIS SOFTWARE.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<!-- $Id$ -->
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="next" href="man.host.html" title="host">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<table width="100%" summary="Navigation header">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<tr><th colspan="3" align="center">dig</th></tr>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<th width="60%" align="center">Manual pages</th>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<a name="man.dig"></a><div class="titlepage"></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p><span><strong class="command">dig</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster (domain information groper) is a flexible tool
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster for interrogating DNS name servers. It performs DNS lookups and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster displays the answers that are returned from the name server(s) that
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster troubleshoot DNS problems because of its flexibility, ease of use and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster clarity of output. Other lookup tools tend to have less functionality
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster than <span><strong class="command">dig</strong></span>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Although <span><strong class="command">dig</strong></span> is normally used with
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster command-line
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster arguments, it also has a batch mode of operation for reading lookup
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster requests from a file. A brief summary of its command-line arguments
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and options is printed when the <code class="option">-h</code> option is given.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Unlike earlier versions, the BIND 9 implementation of
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster command line.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Unless it is told to query a specific name server,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> will try each of the servers listed in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">/etc/resolv.conf</code>. If no usable server addresses
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster are found, <span><strong class="command">dig</strong></span> will send the query to the local
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster When no command line arguments or options are given,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">${HOME}/.digrc</code>. This file is read and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster any options in it
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster are applied before the command line arguments.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The IN and CH class names overlap with the IN and CH top level
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster domain names. Either use the <code class="option">-t</code> and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-c</code> options to specify the type and class,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster use the <code class="option">-q</code> the specify the domain name, or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster use "IN." and "CH." when looking up these top level domains.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster A typical invocation of <span><strong class="command">dig</strong></span> looks like:
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<pre class="programlisting"> dig @server name type </pre>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="constant">server</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is the name or IP address of the name server to query. This
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster can be an IPv4 address in dotted-decimal notation or an IPv6
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster address in colon-delimited notation. When the supplied
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>server</code></em> argument is a hostname,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> resolves that name before querying
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster that name server.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster If no <em class="parameter"><code>server</code></em> argument is
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster provided, <span><strong class="command">dig</strong></span> consults
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">/etc/resolv.conf</code>; if an
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster address is found there, it queries the name server at
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster that address. If either of the <code class="option">-4</code> or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-6</code> options are in use, then
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster only addresses for the corresponding transport
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster will be tried. If no usable addresses are found,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> will send the query to the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster local host. The reply from the name server that
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster responds is displayed.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="constant">name</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is the name of the resource record that is to be looked up.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="constant">type</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster indicates what type of query is required —
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster ANY, A, MX, SIG, etc.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>type</code></em> can be any valid query
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>type</code></em> argument is supplied,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> will perform a lookup for an
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The <code class="option">-b</code> option sets the source IP address of the query
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to <em class="parameter"><code>address</code></em>. This must be a valid
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster one of the host's network interfaces or "0.0.0.0" or "::". An optional
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster may be specified by appending "#<port>"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The default query class (IN for internet) is overridden by the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster class, such as HS for Hesiod records or CH for Chaosnet records.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster in batch mode by reading a list of lookup requests to process from the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster file <em class="parameter"><code>filename</code></em>. The file contains a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster queries, one per line. Each entry in the file should be organized in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the same way they would be presented as queries to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> using the command-line interface.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The <code class="option">-m</code> option enables memory usage debugging.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster If a non-standard port number is to be queried, the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the port number that <span><strong class="command">dig</strong></span> will send its
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster instead of the standard DNS port number 53. This option would be used
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to test a name server that has been configured to listen for queries
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster on a non-standard port number.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster use IPv4 query transport. The <code class="option">-6</code> option forces
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The <code class="option">-t</code> option sets the query type to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>type</code></em>. It can be any valid query type
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster supported in BIND 9. The default query type is "A", unless the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-x</code> option is supplied to indicate a reverse lookup.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster A zone transfer can be requested by specifying a type of AXFR. When
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster an incremental zone transfer (IXFR) is required,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The incremental zone transfer will contain the changes made to the zone
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster since the serial number in the zone's SOA record was
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The <code class="option">-q</code> option sets the query name to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>name</code></em>. This is useful to distinguish the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>name</code></em> from other arguments.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The <code class="option">-v</code> causes <span><strong class="command">dig</strong></span> to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster print the version number and exit.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Reverse lookups — mapping addresses to names — are simplified by the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster address in dotted-decimal notation, or a colon-delimited IPv6 address.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster When this option is used, there is no need to provide the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster automatically performs a lookup for a name like
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster query type and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster class to PTR and IN respectively. By default, IPv6 addresses are
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster looked up using nibble format under the IP6.ARPA domain.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster To use the older RFC1886 method using the IP6.INT domain
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster are now experimental and are not attempted.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster responses using transaction signatures (TSIG), specify a TSIG key file
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster using the <code class="option">-k</code> option. You can also specify the TSIG
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster key itself on the command line using the <code class="option">-y</code> option;
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>name</code></em> is the name of the TSIG key and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>key</code></em> is the actual key. The key is a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster encoded string, typically generated by
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Caution should be taken when using the <code class="option">-y</code> option on
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster multi-user systems as the key can be visible in the output from
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster or in the shell's history file. When
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster server that is queried needs to know the key and algorithm that is
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster being used. In BIND, this is done by providing appropriate
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p><span><strong class="command">dig</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster provides a number of query options which affect
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the way in which lookups are made and the results displayed. Some of
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster these set or reset flag bits in the query header, some determine which
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster sections of the answer get printed, and others determine the timeout
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and retry strategies.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Each query option is identified by a keyword preceded by a plus sign
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster (<code class="literal">+</code>). Some keywords set or reset an
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster option. These may be preceded
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster by the string <code class="literal">no</code> to negate the meaning of
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster that keyword. Other
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster keywords assign values to options like the timeout interval. They
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster have the form <code class="option">+keyword=value</code>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The query options are:
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the "aa" flag in the query.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Display [do not display] the additional section of a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster reply. The default is to display it.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Set [do not set] the AD (authentic data) bit in the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster query. This requests the server to return whether
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster all of the answer and authority sections have all
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster been validated as secure according to the security
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster policy of the server. AD=1 indicates that all records
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster have been validated as secure and the answer is not
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster from a OPT-OUT range. AD=0 indicate that some part
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster of the answer was insecure or not validated. This
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster bit is set by default.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]all</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Set or clear all display flags.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Display [do not display] the answer section of a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster reply. The default is to display it.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Display [do not display] the authority section of a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster reply. The default is to display it.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Attempt to display the contents of messages which are
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster malformed. The default is to not display malformed
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Set the UDP message buffer size advertised using EDNS0
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to <em class="parameter"><code>B</code></em> bytes. The maximum and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster minimum sizes of this buffer are 65535 and 0 respectively.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Values outside this range are rounded up or down
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster appropriately. Values other than zero will cause a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster EDNS query to be sent.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Set [do not set] the CD (checking disabled) bit in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the query. This requests the server to not perform
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster DNSSEC validation of responses.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Display [do not display] the CLASS when printing the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Toggles the printing of the initial comment in the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster output identifying the version of <span><strong class="command">dig</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and the query options that have been applied. This
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster comment is printed by default.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Toggle the display of comment lines in the output.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The default is to print comments.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Toggle the display of cryptographic fields in DNSSEC
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster records. The contents of these field are unnecessary
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to debug most DNSSEC validation failures and removing
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster them makes it easier to see the common failures. The
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster default is to display the fields. When omitted they
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster are replaced by the string "[omitted]" or in the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster DNSKEY case the key id is displayed as the replacement,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster e.g. "[ key id = value ]".
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Deprecated, treated as a synonym for
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>+[no]search</code></em>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Requests DNSSEC records be sent by setting the DNSSEC
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster OK bit (DO) in the OPT record in the additional section
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster of the query.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Set the search list to contain the single domain
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>somename</code></em>, as if specified in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster a <span><strong class="command">domain</strong></span> directive in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">/etc/resolv.conf</code>, and enable
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster search list processing as if the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>+search</code></em> option were given.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Specify the EDNS version to query with. Valid values
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster are 0 to 255. Setting the EDNS version will cause
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster a EDNS query to be sent. <code class="option">+noedns</code>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster clears the remembered EDNS version. EDNS is set to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster 0 by default.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Specify EDNS option with code point <code class="option">code</code>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and optionally payload of <code class="option">value</code> as a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster hexadecimal string. <code class="option">+noednsopt</code>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster clears the EDNS options to be sent.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Send an EDNS Expire option.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Do not try the next server if you receive a SERVFAIL.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The default is to not try the next server which is
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the reverse of normal stub resolver behavior.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Show [or do not show] the IP address and port number
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster that supplied the answer when the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>+short</code></em> option is enabled. If
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster short form answers are requested, the default is not
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to show the source address and port number of the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster server that provided the answer.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Ignore truncation in UDP responses instead of retrying
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster with TCP. By default, TCP retries are performed.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]keepopen</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Keep the TCP socket open between queries and reuse
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster it rather than creating a new TCP socket for each
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster lookup. The default is <code class="option">+nokeepopen</code>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Print records like the SOA records in a verbose
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster multi-line format with human-readable comments. The
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster default is to print each record on a single line, to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster facilitate machine parsing of the <span><strong class="command">dig</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Set the number of dots that have to appear in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster for it to be considered absolute. The default value
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is that defined using the ndots statement in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">/etc/resolv.conf</code>, or 1 if no
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster ndots statement is present. Names with fewer dots
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster are interpreted as relative names and will be searched
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster for in the domains listed in the <code class="option">search</code>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster or <code class="option">domain</code> directive in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">/etc/resolv.conf</code>.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Include an EDNS name server ID request when sending
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster When this option is set, <span><strong class="command">dig</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster attempts to find the authoritative name servers for
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the zone containing the name being looked up and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster display the SOA record that each name server has for
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]onesoa</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Print only one (starting) SOA record when performing
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster an AXFR. The default is to print both the starting
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster and ending SOA records.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Print [do not print] the query as it is sent. By
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster default, the query is not printed.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]question</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Print [do not print] the question section of a query
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster when an answer is returned. The default is to print
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the question section as a comment.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Toggle the setting of the RD (recursion desired) bit
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster in the query. This bit is set by default, which means
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> normally sends recursive
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster queries. Recursion is automatically disabled when
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the <em class="parameter"><code>+nssearch</code></em> or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>+trace</code></em> query options are used.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+retry=T</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the number of times to retry UDP queries to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster server to <em class="parameter"><code>T</code></em> instead of the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster this does not include the initial query.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Toggle the display of per-record comments in the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster output (for example, human-readable key information
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster about DNSKEY records). The default is not to print
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster record comments unless multiline mode is active.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]search</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Use [do not use] the search list defined by the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster searchlist or domain directive in
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">resolv.conf</code> (if any). The search
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster list is not used by default.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]short</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Provide a terse answer. The default is to print the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster answer in a verbose form.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Perform [do not perform] a search showing intermediate
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Chase DNSSEC signature chains. Requires dig be
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster compiled with -DDIG_SIGCHASE.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]sit[<span class="optional">=####</span>]</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Send a Source Identity Token EDNS option, with optional
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster value. Replaying a SIT from a previous response will
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster allow the server to identify a previous client. The
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster default is <code class="option">+nosit</code>. Currently using
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster experimental value 65001 for the option code.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+split=W</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Split long hex- or base64-formatted fields in resource
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster records into chunks of <em class="parameter"><code>W</code></em>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster characters (where <em class="parameter"><code>W</code></em> is rounded
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster up to the nearest multiple of 4).
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>+nosplit</code></em> or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>+split=0</code></em> causes fields not to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster be split at all. The default is 56 characters, or
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster 44 characters when multiline mode is active.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster This query option toggles the printing of statistics:
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster when the query was made, the size of the reply and
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster so on. The default behavior is to print the query
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]subnet=addr/prefix</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Send an EDNS Client Subnet option with the speciifed
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster IP address or network prefix.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Use [do not use] TCP when querying name servers. The
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster default behavior is to use UDP unless an
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="literal">ixfr=N</code> query is requested, in which
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster case the default is TCP. AXFR queries always use
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+time=T</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the timeout for a query to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>T</code></em> seconds. The default
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster timeout is 5 seconds.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster An attempt to set <em class="parameter"><code>T</code></em> to less
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster than 1 will result
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster in a query timeout of 1 second being applied.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster When chasing DNSSEC signature chains perform a top-down
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster validation. Requires dig be compiled with -DDIG_SIGCHASE.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Toggle tracing of the delegation path from the root
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster name servers for the name being looked up. Tracing
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is disabled by default. When tracing is enabled,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">dig</strong></span> makes iterative queries to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster resolve the name being looked up. It will follow
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster referrals from the root servers, showing the answer
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster from each server that was used to resolve the lookup.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <span><strong class="command">+dnssec</strong></span> is also set when +trace
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is set to better emulate the default queries from a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+tries=T</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the number of times to try UDP queries to server
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to <em class="parameter"><code>T</code></em> instead of the default,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster 3. If <em class="parameter"><code>T</code></em> is less than or equal
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to zero, the number of tries is silently rounded up
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Specifies a file containing trusted keys to be used
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster with <code class="option">+sigchase</code>. Each DNSKEY record
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster must be on its own line.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster If not specified, <span><strong class="command">dig</strong></span> will look
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster for <code class="filename">/etc/trusted-key.key</code> then
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <code class="filename">trusted-key.key</code> in the current
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Requires dig be compiled with -DDIG_SIGCHASE.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Display [do not display] the TTL when printing the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Display [do not display] the TTL in friendly human-readable
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster time units of "s", "m", "h", "d", and "w", representing
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster seconds, minutes, hours, days and weeks. Implies +ttlid.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Use [do not use] TCP when querying name servers. This
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster is provided for backwards compatibility. The "vc"
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster stands for "virtual circuit".
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<a name="id2667539"></a><h2>MULTIPLE QUERIES</h2>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster The BIND 9 implementation of <span><strong class="command">dig </strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster specifying multiple queries on the command line (in addition to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster supporting the <code class="option">-f</code> batch file option). Each of those
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster queries can be supplied with its own set of flags, options and query
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster In this case, each <em class="parameter"><code>query</code></em> argument
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster represent an
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster individual query in the command-line syntax described above. Each
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster consists of any of the standard options and flags, the name to be
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster looked up, an optional query type and class and any query options that
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster should be applied to that query.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster A global set of query options, which should be applied to all queries,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster can also be supplied. These global query options must precede the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster first tuple of name, class, type, options, flags, and query options
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster supplied on the command line. Any global query options (except
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the <code class="option">+[no]cmd</code> option) can be
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster overridden by a query-specific set of query options. For example:
8af80418ba1ec431c8027fa9668e5678658d3611Allan Fosterdig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster shows how <span><strong class="command">dig</strong></span> could be used from the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster command line
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster reverse lookup of 127.0.0.1 and a query for the NS records of
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster A global query option of <em class="parameter"><code>+qr</code></em> is
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster that <span><strong class="command">dig</strong></span> shows the initial query it made
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster lookup. The final query has a local query option of
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster will not print the initial query when it looks up the NS records for