man.dig.html revision fc8e82904a5a53fbc8b7e2f9262e3aa74ab20a2c
70e5a7403f0e0a3bd292b8287c5fed5772c15270Automatic Updater - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
ec5347e2c775f027573ce5648b910361aa926c01Automatic Updater - Permission to use, copy, modify, and distribute this software for any
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence - purpose with or without fee is hereby granted, provided that the above
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence - copyright notice and this permission notice appear in all copies.
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<!-- $Id: man.dig.html,v 1.95 2008/12/02 01:11:45 tbox Exp $ -->
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages">
899f7f9af527d3dfe8345dcc8210d7c23fc950afDavid Lawrence<link rel="next" href="man.host.html" title="host">
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<table width="100%" summary="Navigation header">
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<a name="man.dig"></a><div class="titlepage"></div>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-m</code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<p><span><strong class="command">dig</strong></span>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence (domain information groper) is a flexible tool
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence for interrogating DNS name servers. It performs DNS lookups and
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence displays the answers that are returned from the name server(s) that
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence troubleshoot DNS problems because of its flexibility, ease of use and
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein clarity of output. Other lookup tools tend to have less functionality
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein than <span><strong class="command">dig</strong></span>.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Although <span><strong class="command">dig</strong></span> is normally used with
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence arguments, it also has a batch mode of operation for reading lookup
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence requests from a file. A brief summary of its command-line arguments
2918b5bda6a55c301eb87992b5f2acd7176d0737David Lawrence and options is printed when the <code class="option">-h</code> option is given.
2918b5bda6a55c301eb87992b5f2acd7176d0737David Lawrence Unlike earlier versions, the BIND 9 implementation of
2918b5bda6a55c301eb87992b5f2acd7176d0737David Lawrence <span><strong class="command">dig</strong></span> allows multiple lookups to be issued
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein command line.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Unless it is told to query a specific name server,
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span><strong class="command">dig</strong></span> will try each of the servers listed
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <code class="filename">/etc/resolv.conf</code>.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence When no command line arguments or options are given,
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <span><strong class="command">dig</strong></span> will perform an NS query for "." (the root).
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <code class="filename">${HOME}/.digrc</code>. This file is read and
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein any options in it
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein are applied before the command line arguments.
d409ceeda41a256e8114423674d844d5f5035ee8Bob Halley The IN and CH class names overlap with the IN and CH top level
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence domains names. Either use the <code class="option">-t</code> and
8f804834e2b537da5c8bc81f986143a46147b490Andreas Gustafsson <code class="option">-c</code> options to specify the type and class,
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence use the <code class="option">-q</code> the specify the domain name, or
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence use "IN." and "CH." when looking up these top level domains.
8f804834e2b537da5c8bc81f986143a46147b490Andreas Gustafsson A typical invocation of <span><strong class="command">dig</strong></span> looks like:
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<pre class="programlisting"> dig @server name type </pre>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="constant">server</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence is the name or IP address of the name server to query. This can
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence address in dotted-decimal notation or an IPv6
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews address in colon-delimited notation. When the supplied
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews <em class="parameter"><code>server</code></em> argument is a
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <span><strong class="command">dig</strong></span> resolves that name before
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein querying that name
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein server. If no <em class="parameter"><code>server</code></em>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein argument is provided,
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence and queries the name servers listed there. The reply from the
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence server that responds is displayed.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="constant">name</code></span></dt>
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence is the name of the resource record that is to be looked up.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="constant">type</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein indicates what type of query is required —
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence ANY, A, MX, SIG, etc.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>type</code></em> can be any valid query
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>type</code></em> argument is supplied,
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <span><strong class="command">dig</strong></span> will perform a lookup for an
1a487fb7d230403bf1b5d6628542134f52c80653Michael Graff The <code class="option">-b</code> option sets the source IP address of the query
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence to <em class="parameter"><code>address</code></em>. This must be a valid
c4958494a98a59ce25e9fecad76a9ab0e36cc59fDanny Mayer one of the host's network interfaces or "0.0.0.0" or "::". An optional
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein may be specified by appending "#<port>"
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein The default query class (IN for internet) is overridden by the
1a487fb7d230403bf1b5d6628542134f52c80653Michael Graff <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is
1a487fb7d230403bf1b5d6628542134f52c80653Michael Graff class, such as HS for Hesiod records or CH for Chaosnet records.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span>
1a487fb7d230403bf1b5d6628542134f52c80653Michael Graff in batch mode by reading a list of lookup requests to process from the
df0f58959ed82a2a43ca8d816ce9592541df9f2fMark Andrews file <em class="parameter"><code>filename</code></em>. The file contains a
88f7da46901f5d1218e354768674e72e9190d05aMichael Graff queries, one per line. Each entry in the file should be organized in
1a487fb7d230403bf1b5d6628542134f52c80653Michael Graff the same way they would be presented as queries to
b161f87be81548d1b6d0210a7e138a08fbb2d3e5David Lawrence <span><strong class="command">dig</strong></span> using the command-line interface.
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence The <code class="option">-m</code> option enables memory usage debugging.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence If a non-standard port number is to be queried, the
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence the port number that <span><strong class="command">dig</strong></span> will send its
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence instead of the standard DNS port number 53. This option would be used
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein to test a name server that has been configured to listen for queries
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein on a non-standard port number.
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span>
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence use IPv4 query transport. The <code class="option">-6</code> option forces
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span><strong class="command">dig</strong></span> to only use IPv6 query transport.
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence The <code class="option">-t</code> option sets the query type to
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence <em class="parameter"><code>type</code></em>. It can be any valid query type
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein supported in BIND 9. The default query type is "A", unless the
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence <code class="option">-x</code> option is supplied to indicate a reverse lookup.
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence A zone transfer can be requested by specifying a type of AXFR. When
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence an incremental zone transfer (IXFR) is required,
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein The incremental zone transfer will contain the changes made to the zone
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence since the serial number in the zone's SOA record was
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence The <code class="option">-q</code> option sets the query name to
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence <em class="parameter"><code>name</code></em>. This useful do distinguish the
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence <em class="parameter"><code>name</code></em> from other arguments.
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence Reverse lookups — mapping addresses to names — are simplified by the
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence address in dotted-decimal notation, or a colon-delimited IPv6 address.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein When this option is used, there is no need to provide the
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span>
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence automatically performs a lookup for a name like
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein query type and
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence class to PTR and IN respectively. By default, IPv6 addresses are
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein looked up using nibble format under the IP6.ARPA domain.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence To use the older RFC1886 method using the IP6.INT domain
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein specify the <code class="option">-i</code> option. Bit string labels (RFC2874)
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence are now experimental and are not attempted.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence responses using transaction signatures (TSIG), specify a TSIG key file
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence using the <code class="option">-k</code> option. You can also specify the TSIG
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein key itself on the command line using the <code class="option">-y</code> option;
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5,
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>name</code></em> is the name of the TSIG key and
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>key</code></em> is the actual key. The key is a
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence encoded string, typically generated by
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Caution should be taken when using the <code class="option">-y</code> option on
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein multi-user systems as the key can be visible in the output from
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence or in the shell's history file. When
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence using TSIG authentication with <span><strong class="command">dig</strong></span>, the name
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence server that is queried needs to know the key and algorithm that is
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence being used. In BIND, this is done by providing appropriate
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence<a name="id2628712"></a><h2>QUERY OPTIONS</h2>
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence<p><span><strong class="command">dig</strong></span>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein provides a number of query options which affect
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence the way in which lookups are made and the results displayed. Some of
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence these set or reset flag bits in the query header, some determine which
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein sections of the answer get printed, and others determine the timeout
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence and retry strategies.
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence Each query option is identified by a keyword preceded by a plus sign
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein (<code class="literal">+</code>). Some keywords set or reset an
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence option. These may be preceded
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence by the string <code class="literal">no</code> to negate the meaning of
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence that keyword. Other
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein keywords assign values to options like the timeout interval. They
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence have the form <code class="option">+keyword=value</code>.
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence The query options are:
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Use [do not use] TCP when querying name servers. The default
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence behavior is to use UDP unless an AXFR or IXFR query is
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence requested, in
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence which case a TCP connection is used.
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Use [do not use] TCP when querying name servers. This alternate
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein syntax to <em class="parameter"><code>+[no]tcp</code></em> is
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence provided for backwards
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence compatibility. The "vc" stands for "virtual circuit".
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]ignore</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Ignore truncation in UDP responses instead of retrying with TCP.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence default, TCP retries are performed.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+domain=somename</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Set the search list to contain the single domain
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>somename</code></em>, as if specified in
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span><strong class="command">domain</strong></span> directive in
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <code class="filename">/etc/resolv.conf</code>, and enable
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence processing as if the <em class="parameter"><code>+search</code></em>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence option were given.
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence<dt><span class="term"><code class="option">+[no]search</code></span></dt>
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence Use [do not use] the search list defined by the searchlist or
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence directive in <code class="filename">resolv.conf</code> (if
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence The search list is not used by default.
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Perform [do not perform] a search showing intermediate
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence<dt><span class="term"><code class="option">+[no]defname</code></span></dt>
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em>
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence Sets the "aa" flag in the query.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence Set [do not set] the AD (authentic data) bit in the query. The
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence currently has a standard meaning only in responses, not in
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence but the ability to set the bit in the query is provided for
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence completeness.
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence Set [do not set] the CD (checking disabled) bit in the query.
6a8832f784bd53aa6afbda22f6187cea6490e1e1Andreas Gustafsson requests the server to not perform DNSSEC validation of
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence Display [do not display] the CLASS when printing the record.
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Display [do not display] the TTL when printing the record.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Toggle the setting of the RD (recursion desired) bit in the
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein This bit is set by default, which means <span><strong class="command">dig</strong></span>
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence normally sends recursive queries. Recursion is automatically
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence when the <em class="parameter"><code>+nssearch</code></em> or
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>+trace</code></em> query options are
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence When this option is set, <span><strong class="command">dig</strong></span>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein attempts to find the
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence authoritative name servers for the zone containing the name
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein looked up and display the SOA record that each name server has
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]trace</code></span></dt>
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence Toggle tracing of the delegation path from the root name servers
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence the name being looked up. Tracing is disabled by default. When
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein tracing is enabled, <span><strong class="command">dig</strong></span> makes
6a8832f784bd53aa6afbda22f6187cea6490e1e1Andreas Gustafsson iterative queries to
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence resolve the name being looked up. It will follow referrals from
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein root servers, showing the answer from each server that was used
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence resolve the lookup.
ff30a206ecc63b6681716322ed7f017e3f51ea7fDavid Lawrence<dt><span class="term"><code class="option">+[no]cmd</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Toggles the printing of the initial comment in the output
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein the version of <span><strong class="command">dig</strong></span> and the query
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein options that have
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence been applied. This comment is printed by default.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]short</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Provide a terse answer. The default is to print the answer in a
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence verbose form.
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence<dt><span class="term"><code class="option">+[no]identify</code></span></dt>
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence Show [or do not show] the IP address and port number that
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein answer when the <em class="parameter"><code>+short</code></em> option
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence is enabled. If
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence short form answers are requested, the default is not to show the
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence source address and port number of the server that provided the
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Toggle the display of comment lines in the output. The default
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence print comments.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]stats</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence This query option toggles the printing of statistics: when the
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein was made, the size of the reply and so on. The default
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence to print the query statistics.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]qr</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Print [do not print] the query as it is sent.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein By default, the query is not printed.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]question</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Print [do not print] the question section of a query when an
863ac191b448a13ae1a3a8ee3458344e11602737David Lawrence returned. The default is to print the question section as a
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Display [do not display] the answer section of a reply. The
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence is to display it.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Display [do not display] the authority section of a reply. The
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence default is to display it.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Display [do not display] the additional section of a reply.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence The default is to display it.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]all</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Set or clear all display flags.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+time=T</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Sets the timeout for a query to
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>T</code></em> seconds. The default
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence timeout is 5 seconds.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein An attempt to set <em class="parameter"><code>T</code></em> to less
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein than 1 will result
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein in a query timeout of 1 second being applied.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+tries=T</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Sets the number of times to try UDP queries to server to
edcd1247ad7e81bb8b430e610d9718f64c70f05dDavid Lawrence <em class="parameter"><code>T</code></em> instead of the default, 3.
87cafc5e70f79f2586d067fbdd64f61bbab069d2David Lawrence <em class="parameter"><code>T</code></em> is less than or equal to
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein zero, the number of
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence tries is silently rounded up to 1.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+retry=T</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Sets the number of times to retry UDP queries to server to
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>T</code></em> instead of the default, 2.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>+tries</code></em>, this does not include
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+ndots=D</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Set the number of dots that have to appear in
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein considered absolute. The default value is that defined using
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein ndots statement is present. Names with fewer dots are
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence interpreted as
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence relative names and will be searched for in the domains listed in
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <code class="option">search</code> or <code class="option">domain</code> directive in
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <code class="filename">/etc/resolv.conf</code>.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Set the UDP message buffer size advertised using EDNS0 to
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence of this buffer are 65535 and 0 respectively. Values outside
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence this range are rounded up or down appropriately.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Values other than zero will cause a EDNS query to be sent.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+edns=#</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Specify the EDNS version to query with. Valid values
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence are 0 to 255. Setting the EDNS version will cause a
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence EDNS query to be sent. <code class="option">+noedns</code> clears the
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein remembered EDNS version.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein Print records like the SOA records in a verbose multi-line
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence format with human-readable comments. The default is to print
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence each record on a single line, to facilitate machine parsing
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence of the <span><strong class="command">dig</strong></span> output.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence<dt><span class="term"><code class="option">+[no]fail</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Do not try the next server if you receive a SERVFAIL. The
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence to not try the next server which is the reverse of normal stub
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Attempt to display the contents of messages which are malformed.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein The default is to not display malformed answers.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Requests DNSSEC records be sent by setting the DNSSEC OK bit
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein in the OPT record in the additional section of the query.
fc6f5743aa860861fe39ca2680d9aa08e39d3039Andreas Gustafsson<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Chase DNSSEC signature chains. Requires dig be compiled with
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence -DDIG_SIGCHASE.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt>
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence Specifies a file containing trusted keys to be used with
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <code class="option">+sigchase</code>. Each DNSKEY record must be
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence on its own line.
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence If not specified <span><strong class="command">dig</strong></span> will look for
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence <code class="filename">/etc/trusted-key.key</code> then
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <code class="filename">trusted-key.key</code> in the current directory.
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence Requires dig be compiled with -DDIG_SIGCHASE.
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence<dt><span class="term"><code class="option">+[no]topdown</code></span></dt>
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence When chasing DNSSEC signature chains perform a top-down
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence Requires dig be compiled with -DDIG_SIGCHASE.
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
b161f87be81548d1b6d0210a7e138a08fbb2d3e5David Lawrence Include an EDNS name server ID request when sending a query.
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence<a name="id2629644"></a><h2>MULTIPLE QUERIES</h2>
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence The BIND 9 implementation of <span><strong class="command">dig </strong></span>
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence specifying multiple queries on the command line (in addition to
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence supporting the <code class="option">-f</code> batch file option). Each of those
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence queries can be supplied with its own set of flags, options and query
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence In this case, each <em class="parameter"><code>query</code></em> argument
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein represent an
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence individual query in the command-line syntax described above. Each
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein consists of any of the standard options and flags, the name to be
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence looked up, an optional query type and class and any query options that
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence should be applied to that query.
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence A global set of query options, which should be applied to all queries,
00a1623a59b1540c28781e8ccd8341c8114dbc75David Lawrence can also be supplied. These global query options must precede the
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence first tuple of name, class, type, options, flags, and query options
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein supplied on the command line. Any global query options (except
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence the <code class="option">+[no]cmd</code> option) can be
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence overridden by a query-specific set of query options. For example:
fc80027fb54b501cdd88461bf879d078259e0226David Lawrencedig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence shows how <span><strong class="command">dig</strong></span> could be used from the
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein reverse lookup of 127.0.0.1 and a query for the NS records of
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein A global query option of <em class="parameter"><code>+qr</code></em> is
fc80027fb54b501cdd88461bf879d078259e0226David Lawrence that <span><strong class="command">dig</strong></span> shows the initial query it made
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein lookup. The final query has a local query option of
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein will not print the initial query when it looks up the NS records for
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein domain name) support, it can accept and display non-ASCII domain names.
1b038dbf0659fce246485562601ee851a9841ba1David Lawrence <span><strong class="command">dig</strong></span> appropriately converts character encoding of
1b038dbf0659fce246485562601ee851a9841ba1David Lawrence domain name before sending a request to DNS server or displaying a
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein reply from the server.
1b038dbf0659fce246485562601ee851a9841ba1David Lawrence If you'd like to turn off the IDN support for some reason, defines
b161f87be81548d1b6d0210a7e138a08fbb2d3e5David Lawrence the <code class="envar">IDN_DISABLE</code> environment variable.
fc6f5743aa860861fe39ca2680d9aa08e39d3039Andreas Gustafsson The IDN support is disabled if the variable is set when
b161f87be81548d1b6d0210a7e138a08fbb2d3e5David Lawrence <span><strong class="command">dig</strong></span> runs.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<p><code class="filename">/etc/resolv.conf</code>
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>,
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>,
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence There are probably too many query options.
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence<table width="100%" summary="Navigation footer">
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td>
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a>
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence<td width="40%" align="left" valign="top">Manual pages�</td>
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence<td width="40%" align="right" valign="top">�host</td>