dig.1 25.5 KB
Newer Older
Tinderbox User's avatar
Tinderbox User committed
1
.\" Copyright (C) 2000-2011, 2013-2018 Internet Systems Consortium, Inc. ("ISC")
Rob Austein's avatar
regen  
Rob Austein committed
2
.\" 
Tinderbox User's avatar
Tinderbox User committed
3 4 5
.\" This Source Code Form is subject to the terms of the Mozilla Public
.\" License, v. 2.0. If a copy of the MPL was not distributed with this
.\" file, You can obtain one at http://mozilla.org/MPL/2.0/.
Rob Austein's avatar
regen  
Rob Austein committed
6
.\"
Rob Austein's avatar
regen  
Rob Austein committed
7 8
.hy 0
.ad l
Tinderbox User's avatar
Tinderbox User committed
9
'\" t
Automatic Updater's avatar
regen  
Automatic Updater committed
10
.\"     Title: dig
Tinderbox User's avatar
Tinderbox User committed
11
.\"    Author: 
Tinderbox User's avatar
Tinderbox User committed
12
.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
Tinderbox User's avatar
Tinderbox User committed
13
.\"      Date: 2014-02-19
Automatic Updater's avatar
regen  
Automatic Updater committed
14
.\"    Manual: BIND9
Tinderbox User's avatar
Tinderbox User committed
15 16
.\"    Source: ISC
.\"  Language: English
Automatic Updater's avatar
regen  
Automatic Updater committed
17
.\"
Tinderbox User's avatar
Tinderbox User committed
18 19 20 21 22 23 24 25 26 27 28 29 30
.TH "DIG" "1" "2014\-02\-19" "ISC" "BIND9"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
Automatic Updater's avatar
regen  
Automatic Updater committed
31 32 33 34
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
Tinderbox User's avatar
Tinderbox User committed
35 36 37
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
Automatic Updater's avatar
regen  
Automatic Updater committed
38
.SH "NAME"
39
dig \- DNS lookup utility
Rob Austein's avatar
regen  
Rob Austein committed
40
.SH "SYNOPSIS"
Tinderbox User's avatar
Tinderbox User committed
41
.HP \w'\fBdig\fR\ 'u
Tinderbox User's avatar
Tinderbox User committed
42
\fBdig\fR [@server] [\fB\-b\ \fR\fB\fIaddress\fR\fR] [\fB\-c\ \fR\fB\fIclass\fR\fR] [\fB\-f\ \fR\fB\fIfilename\fR\fR] [\fB\-k\ \fR\fB\fIfilename\fR\fR] [\fB\-m\fR] [\fB\-p\ \fR\fB\fIport#\fR\fR] [\fB\-q\ \fR\fB\fIname\fR\fR] [\fB\-t\ \fR\fB\fItype\fR\fR] [\fB\-v\fR] [\fB\-x\ \fR\fB\fIaddr\fR\fR] [\fB\-y\ \fR\fB\fI[hmac:]\fR\fIname:key\fR\fR] [[\fB\-4\fR] | [\fB\-6\fR]] [name] [type] [class] [queryopt...]
Tinderbox User's avatar
Tinderbox User committed
43
.HP \w'\fBdig\fR\ 'u
Rob Austein's avatar
regen  
Rob Austein committed
44
\fBdig\fR [\fB\-h\fR]
Tinderbox User's avatar
Tinderbox User committed
45
.HP \w'\fBdig\fR\ 'u
Rob Austein's avatar
regen  
Rob Austein committed
46
\fBdig\fR [global\-queryopt...] [query...]
47 48
.SH "DESCRIPTION"
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
49
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
50
is a flexible tool for interrogating DNS name servers\&. It performs DNS lookups and displays the answers that are returned from the name server(s) that were queried\&. Most DNS administrators use
Automatic Updater's avatar
regen  
Automatic Updater committed
51
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
52 53
to troubleshoot DNS problems because of its flexibility, ease of use and clarity of output\&. Other lookup tools tend to have less functionality than
\fBdig\fR\&.
54
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
55 56
Although
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
57
is normally used with command\-line arguments, it also has a batch mode of operation for reading lookup requests from a file\&. A brief summary of its command\-line arguments and options is printed when the
Automatic Updater's avatar
regen  
Automatic Updater committed
58
\fB\-h\fR
Tinderbox User's avatar
Tinderbox User committed
59
option is given\&. Unlike earlier versions, the BIND 9 implementation of
Automatic Updater's avatar
regen  
Automatic Updater committed
60
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
61
allows multiple lookups to be issued from the command line\&.
62
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
63 64 65
Unless it is told to query a specific name server,
\fBdig\fR
will try each of the servers listed in
Tinderbox User's avatar
Tinderbox User committed
66
/etc/resolv\&.conf\&. If no usable server addresses are found,
Tinderbox User's avatar
Tinderbox User committed
67
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
68
will send the query to the local host\&.
69
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
70 71
When no command line arguments or options are given,
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
72
will perform an NS query for "\&." (the root)\&.
Andreas Gustafsson's avatar
Andreas Gustafsson committed
73
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
74 75 76
It is possible to set per\-user defaults for
\fBdig\fR
via
Tinderbox User's avatar
Tinderbox User committed
77 78 79
${HOME}/\&.digrc\&. This file is read and any options in it are applied before the command line arguments\&. The
\fB\-r\fR
option disables this feature, for scripts that need predictable behaviour\&.
Mark Andrews's avatar
regen  
Mark Andrews committed
80
.PP
Tinderbox User's avatar
Tinderbox User committed
81
The IN and CH class names overlap with the IN and CH top level domain names\&. Either use the
Automatic Updater's avatar
regen  
Automatic Updater committed
82 83 84
\fB\-t\fR
and
\fB\-c\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
85
options to specify the type and class, use the
Automatic Updater's avatar
regen  
Automatic Updater committed
86
\fB\-q\fR
Tinderbox User's avatar
Tinderbox User committed
87
the specify the domain name, or use "IN\&." and "CH\&." when looking up these top level domains\&.
88 89
.SH "SIMPLE USAGE"
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
90 91 92 93
A typical invocation of
\fBdig\fR
looks like:
.sp
Tinderbox User's avatar
Tinderbox User committed
94
.if n \{\
Automatic Updater's avatar
regen  
Automatic Updater committed
95
.RS 4
Tinderbox User's avatar
Tinderbox User committed
96
.\}
97 98 99
.nf
 dig @server name type 
.fi
Tinderbox User's avatar
Tinderbox User committed
100
.if n \{\
Automatic Updater's avatar
regen  
Automatic Updater committed
101
.RE
Tinderbox User's avatar
Tinderbox User committed
102
.\}
Automatic Updater's avatar
regen  
Automatic Updater committed
103 104 105
.sp
where:
.PP
106
\fBserver\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
107
.RS 4
Tinderbox User's avatar
Tinderbox User committed
108
is the name or IP address of the name server to query\&. This can be an IPv4 address in dotted\-decimal notation or an IPv6 address in colon\-delimited notation\&. When the supplied
Automatic Updater's avatar
regen  
Automatic Updater committed
109 110 111
\fIserver\fR
argument is a hostname,
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
112
resolves that name before querying that name server\&.
Tinderbox User's avatar
Tinderbox User committed
113 114
.sp
If no
Automatic Updater's avatar
regen  
Automatic Updater committed
115 116 117 118
\fIserver\fR
argument is provided,
\fBdig\fR
consults
Tinderbox User's avatar
Tinderbox User committed
119
/etc/resolv\&.conf; if an address is found there, it queries the name server at that address\&. If either of the
Tinderbox User's avatar
Tinderbox User committed
120 121 122
\fB\-4\fR
or
\fB\-6\fR
Tinderbox User's avatar
Tinderbox User committed
123
options are in use, then only addresses for the corresponding transport will be tried\&. If no usable addresses are found,
Tinderbox User's avatar
Tinderbox User committed
124
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
125
will send the query to the local host\&. The reply from the name server that responds is displayed\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
126 127
.RE
.PP
128
\fBname\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
129
.RS 4
Tinderbox User's avatar
Tinderbox User committed
130
is the name of the resource record that is to be looked up\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
131 132
.RE
.PP
133
\fBtype\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
134
.RS 4
Tinderbox User's avatar
Tinderbox User committed
135
indicates what type of query is required \(em ANY, A, MX, SIG, etc\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
136
\fItype\fR
Tinderbox User's avatar
Tinderbox User committed
137
can be any valid query type\&. If no
Automatic Updater's avatar
regen  
Automatic Updater committed
138 139 140
\fItype\fR
argument is supplied,
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
141
will perform a lookup for an A record\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
142
.RE
143 144
.SH "OPTIONS"
.PP
Tinderbox User's avatar
Tinderbox User committed
145 146
\-4
.RS 4
Tinderbox User's avatar
Tinderbox User committed
147
Use IPv4 only\&.
Tinderbox User's avatar
Tinderbox User committed
148
.RE
149
.PP
Tinderbox User's avatar
Tinderbox User committed
150 151
\-6
.RS 4
Tinderbox User's avatar
Tinderbox User committed
152
Use IPv6 only\&.
Tinderbox User's avatar
Tinderbox User committed
153 154 155 156
.RE
.PP
\-b \fIaddress\fR\fI[#port]\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
157
Set the source IP address of the query\&. The
Tinderbox User's avatar
Tinderbox User committed
158
\fIaddress\fR
Tinderbox User's avatar
Tinderbox User committed
159
must be a valid address on one of the host\*(Aqs network interfaces, or "0\&.0\&.0\&.0" or "::"\&. An optional port may be specified by appending "#<port>"
Tinderbox User's avatar
Tinderbox User committed
160 161 162 163
.RE
.PP
\-c \fIclass\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
164
Set the query class\&. The default
Automatic Updater's avatar
regen  
Automatic Updater committed
165
\fIclass\fR
Tinderbox User's avatar
Tinderbox User committed
166
is IN; other classes are HS for Hesiod records or CH for Chaosnet records\&.
Tinderbox User's avatar
Tinderbox User committed
167
.RE
168
.PP
Tinderbox User's avatar
Tinderbox User committed
169 170 171 172 173
\-f \fIfile\fR
.RS 4
Batch mode:
\fBdig\fR
reads a list of lookup requests to process from the given
Tinderbox User's avatar
Tinderbox User committed
174
\fIfile\fR\&. Each line in the file should be organized in the same way they would be presented as queries to
Automatic Updater's avatar
regen  
Automatic Updater committed
175
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
176
using the command\-line interface\&.
Tinderbox User's avatar
Tinderbox User committed
177
.RE
178
.PP
Tinderbox User's avatar
Tinderbox User committed
179 180
\-k \fIkeyfile\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
181 182 183
Sign queries using TSIG using a key read from the given file\&. Key files can be generated using
\fBtsig-keygen\fR(8)\&. When using TSIG authentication with
\fBdig\fR, the name server that is queried needs to know the key and algorithm that is being used\&. In BIND, this is done by providing appropriate
Tinderbox User's avatar
Tinderbox User committed
184 185 186 187
\fBkey\fR
and
\fBserver\fR
statements in
Tinderbox User's avatar
Tinderbox User committed
188
named\&.conf\&.
Tinderbox User's avatar
Tinderbox User committed
189
.RE
190
.PP
Tinderbox User's avatar
Tinderbox User committed
191 192
\-m
.RS 4
Tinderbox User's avatar
Tinderbox User committed
193
Enable memory usage debugging\&.
Tinderbox User's avatar
Tinderbox User committed
194
.RE
Mark Andrews's avatar
regen  
Mark Andrews committed
195
.PP
Tinderbox User's avatar
Tinderbox User committed
196 197
\-p \fIport\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
198
Send the query to a non\-standard port on the server, instead of the default port 53\&. This option would be used to test a name server that has been configured to listen for queries on a non\-standard port number\&.
Tinderbox User's avatar
Tinderbox User committed
199 200 201 202
.RE
.PP
\-q \fIname\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
203
The domain name to query\&. This is useful to distinguish the
Tinderbox User's avatar
Tinderbox User committed
204
\fIname\fR
Tinderbox User's avatar
Tinderbox User committed
205
from other arguments\&.
Tinderbox User's avatar
Tinderbox User committed
206 207
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
208 209 210 211 212 213
\-r
.RS 4
Do not read options from
${HOME}/\&.digrc\&. This is useful for scripts that need predictable behaviour\&.
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
214 215
\-t \fItype\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
216
The resource record type to query\&. It can be any valid query type\&. If it is a resource record type supported in BIND 9, it can be given by the type mnemonic (such as "NS" or "AAAA")\&. The default query type is "A", unless the
Automatic Updater's avatar
regen  
Automatic Updater committed
217
\fB\-x\fR
Tinderbox User's avatar
Tinderbox User committed
218
option is supplied to indicate a reverse lookup\&. A zone transfer can be requested by specifying a type of AXFR\&. When an incremental zone transfer (IXFR) is required, set the
Automatic Updater's avatar
regen  
Automatic Updater committed
219
\fItype\fR
Tinderbox User's avatar
Tinderbox User committed
220
to
Tinderbox User's avatar
Tinderbox User committed
221 222
ixfr=N\&. The incremental zone transfer will contain the changes made to the zone since the serial number in the zone\*(Aqs SOA record was
\fIN\fR\&.
Tinderbox User's avatar
Tinderbox User committed
223 224
.sp
All resource record types can be expressed as "TYPEnn", where "nn" is the number of the type\&. If the resource record type is not supported in BIND 9, the result will be displayed as described in RFC 3597\&.
Tinderbox User's avatar
Tinderbox User committed
225
.RE
226
.PP
Tinderbox User's avatar
Tinderbox User committed
227 228 229 230 231
\-u
.RS 4
Print query times in microseconds instead of milliseconds\&.
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
232 233
\-v
.RS 4
Tinderbox User's avatar
Tinderbox User committed
234
Print the version number and exit\&.
Tinderbox User's avatar
Tinderbox User committed
235
.RE
Tinderbox User's avatar
Tinderbox User committed
236
.PP
Tinderbox User's avatar
Tinderbox User committed
237 238
\-x \fIaddr\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
239
Simplified reverse lookups, for mapping addresses to names\&. The
Automatic Updater's avatar
regen  
Automatic Updater committed
240
\fIaddr\fR
Tinderbox User's avatar
Tinderbox User committed
241
is an IPv4 address in dotted\-decimal notation, or a colon\-delimited IPv6 address\&. When the
Tinderbox User's avatar
Tinderbox User committed
242 243
\fB\-x\fR
is used, there is no need to provide the
Automatic Updater's avatar
regen  
Automatic Updater committed
244 245 246 247
\fIname\fR,
\fIclass\fR
and
\fItype\fR
Tinderbox User's avatar
Tinderbox User committed
248
arguments\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
249 250
\fBdig\fR
automatically performs a lookup for a name like
Tinderbox User's avatar
Tinderbox User committed
251
94\&.2\&.0\&.192\&.in\-addr\&.arpa
Tinderbox User's avatar
Tinderbox User committed
252
and sets the query type and class to PTR and IN respectively\&. IPv6 addresses are looked up using nibble format under the IP6\&.ARPA domain\&.
Tinderbox User's avatar
Tinderbox User committed
253
.RE
254
.PP
Tinderbox User's avatar
Tinderbox User committed
255 256
\-y \fI[hmac:]\fR\fIkeyname:secret\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
257
Sign queries using TSIG with the given authentication key\&.
Tinderbox User's avatar
Tinderbox User committed
258 259 260
\fIkeyname\fR
is the name of the key, and
\fIsecret\fR
Tinderbox User's avatar
Tinderbox User committed
261
is the base64 encoded shared secret\&.
Tinderbox User's avatar
Tinderbox User committed
262 263 264 265 266 267 268
\fIhmac\fR
is the name of the key algorithm; valid choices are
hmac\-md5,
hmac\-sha1,
hmac\-sha224,
hmac\-sha256,
hmac\-sha384, or
Tinderbox User's avatar
Tinderbox User committed
269
hmac\-sha512\&. If
Tinderbox User's avatar
Tinderbox User committed
270 271
\fIhmac\fR
is not specified, the default is
Tinderbox User's avatar
Tinderbox User committed
272 273 274
hmac\-md5
or if MD5 was disabled
hmac\-sha256\&.
Tinderbox User's avatar
Tinderbox User committed
275 276
.sp
NOTE: You should use the
Automatic Updater's avatar
regen  
Automatic Updater committed
277
\fB\-k\fR
Tinderbox User's avatar
Tinderbox User committed
278
option and avoid the
Automatic Updater's avatar
regen  
Automatic Updater committed
279
\fB\-y\fR
Tinderbox User's avatar
Tinderbox User committed
280
option, because with
Automatic Updater's avatar
regen  
Automatic Updater committed
281
\fB\-y\fR
Tinderbox User's avatar
Tinderbox User committed
282
the shared secret is supplied as a command line argument in clear text\&. This may be visible in the output from
Automatic Updater's avatar
regen  
Automatic Updater committed
283
\fBps\fR(1)
Tinderbox User's avatar
Tinderbox User committed
284
or in a history file maintained by the user\*(Aqs shell\&.
Tinderbox User's avatar
Tinderbox User committed
285
.RE
286 287
.SH "QUERY OPTIONS"
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
288
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
289
provides a number of query options which affect the way in which lookups are made and the results displayed\&. Some of these set or reset flag bits in the query header, some determine which sections of the answer get printed, and others determine the timeout and retry strategies\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
290
.PP
Tinderbox User's avatar
Tinderbox User committed
291
Each query option is identified by a keyword preceded by a plus sign (+)\&. Some keywords set or reset an option\&. These may be preceded by the string
Automatic Updater's avatar
regen  
Automatic Updater committed
292
no
Tinderbox User's avatar
Tinderbox User committed
293 294
to negate the meaning of that keyword\&. Other keywords assign values to options like the timeout interval\&. They have the form
\fB+keyword=value\fR\&. Keywords may be abbreviated, provided the abbreviation is unambiguous; for example,
Tinderbox User's avatar
Tinderbox User committed
295 296
+cd
is equivalent to
Tinderbox User's avatar
Tinderbox User committed
297
+cdflag\&. The query options are:
Mark Andrews's avatar
regen  
Mark Andrews committed
298
.PP
Tinderbox User's avatar
Tinderbox User committed
299
\fB+[no]aaflag\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
300
.RS 4
Tinderbox User's avatar
Tinderbox User committed
301
A synonym for
Tinderbox User's avatar
Tinderbox User committed
302
\fI+[no]aaonly\fR\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
303 304
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
305
\fB+[no]aaonly\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
306
.RS 4
Tinderbox User's avatar
Tinderbox User committed
307
Sets the "aa" flag in the query\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
308 309
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
310
\fB+[no]additional\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
311
.RS 4
Tinderbox User's avatar
Tinderbox User committed
312
Display [do not display] the additional section of a reply\&. The default is to display it\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
313 314
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
315
\fB+[no]adflag\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
316
.RS 4
Tinderbox User's avatar
Tinderbox User committed
317
Set [do not set] the AD (authentic data) bit in the query\&. This requests the server to return whether all of the answer and authority sections have all been validated as secure according to the security policy of the server\&. AD=1 indicates that all records have been validated as secure and the answer is not from a OPT\-OUT range\&. AD=0 indicate that some part of the answer was insecure or not validated\&. This bit is set by default\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
318 319
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
320
\fB+[no]all\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
321
.RS 4
Tinderbox User's avatar
Tinderbox User committed
322
Set or clear all display flags\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
323 324
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
325
\fB+[no]answer\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
326
.RS 4
Tinderbox User's avatar
Tinderbox User committed
327
Display [do not display] the answer section of a reply\&. The default is to display it\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
328 329
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
330
\fB+[no]authority\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
331
.RS 4
Tinderbox User's avatar
Tinderbox User committed
332
Display [do not display] the authority section of a reply\&. The default is to display it\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
333 334
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
335 336
\fB+[no]badcookie\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
337
Retry lookup with the new server cookie if a BADCOOKIE response is received\&.
Tinderbox User's avatar
Tinderbox User committed
338 339
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
340
\fB+[no]besteffort\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
341
.RS 4
Tinderbox User's avatar
Tinderbox User committed
342
Attempt to display the contents of messages which are malformed\&. The default is to not display malformed answers\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
343 344
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
345
\fB+bufsize=B\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
346
.RS 4
Tinderbox User's avatar
Tinderbox User committed
347 348
Set the UDP message buffer size advertised using EDNS0 to
\fIB\fR
Tinderbox User's avatar
Tinderbox User committed
349
bytes\&. The maximum and minimum sizes of this buffer are 65535 and 0 respectively\&. Values outside this range are rounded up or down appropriately\&. Values other than zero will cause a EDNS query to be sent\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
350 351
.RE
.PP
352
\fB+[no]cdflag\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
353
.RS 4
Tinderbox User's avatar
Tinderbox User committed
354
Set [do not set] the CD (checking disabled) bit in the query\&. This requests the server to not perform DNSSEC validation of responses\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
355 356
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
357
\fB+[no]class\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
358
.RS 4
Tinderbox User's avatar
Tinderbox User committed
359
Display [do not display] the CLASS when printing the record\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
360 361
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
362
\fB+[no]cmd\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
363
.RS 4
Tinderbox User's avatar
Tinderbox User committed
364 365
Toggles the printing of the initial comment in the output identifying the version of
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
366
and the query options that have been applied\&. This comment is printed by default\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
367 368
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
369
\fB+[no]comments\fR
Tinderbox User's avatar
Tinderbox User committed
370
.RS 4
Tinderbox User's avatar
Tinderbox User committed
371
Toggle the display of comment lines in the output\&. The default is to print comments\&.
Tinderbox User's avatar
Tinderbox User committed
372 373
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
374 375
\fB+[no]cookie\fR\fB[=####]\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
376 377
Send a COOKIE EDNS option, with optional value\&. Replaying a COOKIE from a previous response will allow the server to identify a previous client\&. The default is
\fB+cookie\fR\&.
Tinderbox User's avatar
Tinderbox User committed
378 379
.sp
\fB+cookie\fR
Tinderbox User's avatar
Tinderbox User committed
380
is also set when +trace is set to better emulate the default queries from a nameserver\&.
Tinderbox User's avatar
Tinderbox User committed
381 382
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
383
\fB+[no]crypto\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
384
.RS 4
Tinderbox User's avatar
Tinderbox User committed
385
Toggle the display of cryptographic fields in DNSSEC records\&. The contents of these field are unnecessary to debug most DNSSEC validation failures and removing them makes it easier to see the common failures\&. The default is to display the fields\&. When omitted they are replaced by the string "[omitted]" or in the DNSKEY case the key id is displayed as the replacement, e\&.g\&. "[ key id = value ]"\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
386 387
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
388
\fB+[no]defname\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
389
.RS 4
Tinderbox User's avatar
Tinderbox User committed
390 391
Deprecated, treated as a synonym for
\fI+[no]search\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
392 393
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
394 395
\fB+[no]dnssec\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
396
Requests DNSSEC records be sent by setting the DNSSEC OK bit (DO) in the OPT record in the additional section of the query\&.
Tinderbox User's avatar
Tinderbox User committed
397 398
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
399
\fB+domain=somename\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
400
.RS 4
Tinderbox User's avatar
Tinderbox User committed
401 402 403 404
Set the search list to contain the single domain
\fIsomename\fR, as if specified in a
\fBdomain\fR
directive in
Tinderbox User's avatar
Tinderbox User committed
405
/etc/resolv\&.conf, and enable search list processing as if the
Tinderbox User's avatar
Tinderbox User committed
406
\fI+search\fR
Tinderbox User's avatar
Tinderbox User committed
407
option were given\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
408 409
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
410 411
\fB+dscp=value\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
412
Set the DSCP code point to be used when sending the query\&. Valid DSCP code points are in the range [0\&.\&.63]\&. By default no code point is explicitly set\&.
Tinderbox User's avatar
Tinderbox User committed
413 414
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
415
\fB+[no]edns[=#]\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
416
.RS 4
Tinderbox User's avatar
Tinderbox User committed
417
Specify the EDNS version to query with\&. Valid values are 0 to 255\&. Setting the EDNS version will cause a EDNS query to be sent\&.
Tinderbox User's avatar
Tinderbox User committed
418
\fB+noedns\fR
Tinderbox User's avatar
Tinderbox User committed
419
clears the remembered EDNS version\&. EDNS is set to 0 by default\&.
Tinderbox User's avatar
Tinderbox User committed
420 421
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
422 423
\fB+[no]ednsflags[=#]\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
424
Set the must\-be\-zero EDNS flags bits (Z bits) to the specified value\&. Decimal, hex and octal encodings are accepted\&. Setting a named flag (e\&.g\&. DO) will silently be ignored\&. By default, no Z bits are set\&.
Tinderbox User's avatar
Tinderbox User committed
425 426
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
427 428
\fB+[no]ednsnegotiation\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
429
Enable / disable EDNS version negotiation\&. By default EDNS version negotiation is enabled\&.
Tinderbox User's avatar
Tinderbox User committed
430 431
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
432 433 434 435 436 437
\fB+[no]ednsopt[=code[:value]]\fR
.RS 4
Specify EDNS option with code point
\fBcode\fR
and optionally payload of
\fBvalue\fR
Tinderbox User's avatar
Tinderbox User committed
438
as a hexadecimal string\&.
Tinderbox User's avatar
Tinderbox User committed
439 440 441 442 443
\fBcode\fR
can be either an EDNS option name (for example,
NSID
or
ECS), or an arbitrary numeric value\&.
Tinderbox User's avatar
Tinderbox User committed
444
\fB+noednsopt\fR
Tinderbox User's avatar
Tinderbox User committed
445
clears the EDNS options to be sent\&.
Tinderbox User's avatar
Tinderbox User committed
446 447 448 449
.RE
.PP
\fB+[no]expire\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
450
Send an EDNS Expire option\&.
Tinderbox User's avatar
Tinderbox User committed
451 452 453 454
.RE
.PP
\fB+[no]fail\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
455
Do not try the next server if you receive a SERVFAIL\&. The default is to not try the next server which is the reverse of normal stub resolver behavior\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
456 457
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
458 459
\fB+[no]header\-only\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
460
Send a query with a DNS header without a question section\&. The default is to add a question section\&. The query type and query name are ignored when this is set\&.
Tinderbox User's avatar
Tinderbox User committed
461 462
.RE
.PP
463
\fB+[no]identify\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
464 465 466
.RS 4
Show [or do not show] the IP address and port number that supplied the answer when the
\fI+short\fR
Tinderbox User's avatar
Tinderbox User committed
467
option is enabled\&. If short form answers are requested, the default is not to show the source address and port number of the server that provided the answer\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
468 469
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
470 471
\fB+[no]idnin\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
472 473 474
Process [do not process] IDN domain names on input\&. This requires IDN SUPPORT to have been enabled at compile time\&.
.sp
The default is to process IDN input when standard output is a tty\&. The IDN processing on input is disabled when dig output is redirected to files, pipes, and other non\-tty file descriptors\&.
Tinderbox User's avatar
Tinderbox User committed
475 476
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
477 478
\fB+[no]idnout\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
479 480 481
Convert [do not convert] puny code on output\&. This requires IDN SUPPORT to have been enabled at compile time\&.
.sp
The default is to process puny code on output when standard output is a tty\&. The puny code processing on output is disabled when dig output is redirected to files, pipes, and other non\-tty file descriptors\&.
Tinderbox User's avatar
Tinderbox User committed
482 483
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
484
\fB+[no]ignore\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
485
.RS 4
Tinderbox User's avatar
Tinderbox User committed
486
Ignore truncation in UDP responses instead of retrying with TCP\&. By default, TCP retries are performed\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
487 488
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
489 490 491 492 493
\fB+[no]keepalive\fR
.RS 4
Send [or do not send] an EDNS Keepalive option\&.
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
494
\fB+[no]keepopen\fR
Automatic Updater's avatar
Automatic Updater committed
495
.RS 4
Tinderbox User's avatar
Tinderbox User committed
496 497
Keep the TCP socket open between queries and reuse it rather than creating a new TCP socket for each lookup\&. The default is
\fB+nokeepopen\fR\&.
Automatic Updater's avatar
Automatic Updater committed
498 499
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
500 501 502 503 504 505
\fB+[no]mapped\fR
.RS 4
Allow mapped IPv4 over IPv6 addresses to be used\&. The default is
\fB+mapped\fR\&.
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
506
\fB+[no]multiline\fR
Tinderbox User's avatar
Tinderbox User committed
507
.RS 4
Tinderbox User's avatar
Tinderbox User committed
508
Print records like the SOA records in a verbose multi\-line format with human\-readable comments\&. The default is to print each record on a single line, to facilitate machine parsing of the
Tinderbox User's avatar
Tinderbox User committed
509
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
510
output\&.
Tinderbox User's avatar
Tinderbox User committed
511 512
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
513
\fB+ndots=D\fR
Automatic Updater's avatar
Automatic Updater committed
514
.RS 4
Tinderbox User's avatar
Tinderbox User committed
515 516 517 518
Set the number of dots that have to appear in
\fIname\fR
to
\fID\fR
Tinderbox User's avatar
Tinderbox User committed
519 520
for it to be considered absolute\&. The default value is that defined using the ndots statement in
/etc/resolv\&.conf, or 1 if no ndots statement is present\&. Names with fewer dots are interpreted as relative names and will be searched for in the domains listed in the
Tinderbox User's avatar
Tinderbox User committed
521
\fBsearch\fR
Automatic Updater's avatar
Automatic Updater committed
522
or
Tinderbox User's avatar
Tinderbox User committed
523 524
\fBdomain\fR
directive in
Tinderbox User's avatar
Tinderbox User committed
525
/etc/resolv\&.conf
Tinderbox User's avatar
Tinderbox User committed
526 527
if
\fB+search\fR
Tinderbox User's avatar
Tinderbox User committed
528
is set\&.
Automatic Updater's avatar
Automatic Updater committed
529 530
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
531
\fB+[no]nsid\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
532
.RS 4
Tinderbox User's avatar
Tinderbox User committed
533
Include an EDNS name server ID request when sending a query\&.
Tinderbox User's avatar
Tinderbox User committed
534 535 536 537 538 539
.RE
.PP
\fB+[no]nssearch\fR
.RS 4
When this option is set,
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
540
attempts to find the authoritative name servers for the zone containing the name being looked up and display the SOA record that each name server has for the zone\&. Addresses of servers that that did not respond are also printed\&.
Tinderbox User's avatar
Tinderbox User committed
541 542 543 544
.RE
.PP
\fB+[no]onesoa\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
545
Print only one (starting) SOA record when performing an AXFR\&. The default is to print both the starting and ending SOA records\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
546 547
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
548 549
\fB+[no]opcode=value\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
550
Set [restore] the DNS message opcode to the specified value\&. The default value is QUERY (0)\&.
Tinderbox User's avatar
Tinderbox User committed
551 552
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
553 554 555 556 557 558 559 560 561
\fB+padding=value\fR
.RS 4
Pad the size of the query packet using the EDNS Padding option to blocks of
\fIvalue\fR
bytes\&. For example,
\fB+padding=32\fR
would cause a 48\-byte query to be padded to 64 bytes\&. The default block size is 0, which disables padding\&. The maximum is 512\&. Values are ordinarily expected to be powers of two, such as 128; however, this is not mandatory\&. Responses to padded queries may also be padded, but only if the query uses TCP or DNS COOKIE\&.
.RE
.PP
562
\fB+[no]qr\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
563
.RS 4
Tinderbox User's avatar
Tinderbox User committed
564
Print [do not print] the query as it is sent\&. By default, the query is not printed\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
565 566
.RE
.PP
567
\fB+[no]question\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
568
.RS 4
Tinderbox User's avatar
Tinderbox User committed
569
Print [do not print] the question section of a query when an answer is returned\&. The default is to print the question section as a comment\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
570 571
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
572 573 574 575 576
\fB+[no]raflag\fR
.RS 4
Set [do not set] the RA (Recursion Available) bit in the query\&. The default is +noraflag\&. This bit should be ignored by the server for QUERY\&.
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
577 578 579
\fB+[no]rdflag\fR
.RS 4
A synonym for
Tinderbox User's avatar
Tinderbox User committed
580
\fI+[no]recurse\fR\&.
Tinderbox User's avatar
Tinderbox User committed
581 582
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
583
\fB+[no]recurse\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
584
.RS 4
Tinderbox User's avatar
Tinderbox User committed
585
Toggle the setting of the RD (recursion desired) bit in the query\&. This bit is set by default, which means
Tinderbox User's avatar
Tinderbox User committed
586
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
587
normally sends recursive queries\&. Recursion is automatically disabled when the
Tinderbox User's avatar
Tinderbox User committed
588 589 590
\fI+nssearch\fR
or
\fI+trace\fR
Tinderbox User's avatar
Tinderbox User committed
591
query options are used\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
592 593
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
594
\fB+retry=T\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
595
.RS 4
Tinderbox User's avatar
Tinderbox User committed
596 597
Sets the number of times to retry UDP queries to server to
\fIT\fR
Tinderbox User's avatar
Tinderbox User committed
598 599
instead of the default, 2\&. Unlike
\fI+tries\fR, this does not include the initial query\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
600 601
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
602
\fB+[no]rrcomments\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
603
.RS 4
Tinderbox User's avatar
Tinderbox User committed
604
Toggle the display of per\-record comments in the output (for example, human\-readable key information about DNSKEY records)\&. The default is not to print record comments unless multiline mode is active\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
605 606
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
607
\fB+[no]search\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
608
.RS 4
Tinderbox User's avatar
Tinderbox User committed
609
Use [do not use] the search list defined by the searchlist or domain directive in
Tinderbox User's avatar
Tinderbox User committed
610 611
resolv\&.conf
(if any)\&. The search list is not used by default\&.
Tinderbox User's avatar
Tinderbox User committed
612
.sp
Tinderbox User's avatar
Tinderbox User committed
613 614
\*(Aqndots\*(Aq from
resolv\&.conf
Tinderbox User's avatar
Tinderbox User committed
615 616
(default 1) which may be overridden by
\fI+ndots\fR
Tinderbox User's avatar
Tinderbox User committed
617
determines if the name will be treated as relative or not and hence whether a search is eventually performed or not\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
618 619
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
620
\fB+[no]short\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
621
.RS 4
Tinderbox User's avatar
Tinderbox User committed
622
Provide a terse answer\&. The default is to print the answer in a verbose form\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
623 624
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
625
\fB+[no]showsearch\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
626
.RS 4
Tinderbox User's avatar
Tinderbox User committed
627
Perform [do not perform] a search showing intermediate results\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
628 629
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
630
\fB+[no]sigchase\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
631
.RS 4
Evan Hunt's avatar
Evan Hunt committed
632
This feature is now obsolete and has been removed; use
Tinderbox User's avatar
Tinderbox User committed
633 634
\fBdelv\fR
instead\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
635 636
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
637
\fB+split=W\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
638
.RS 4
Tinderbox User's avatar
Tinderbox User committed
639 640 641 642
Split long hex\- or base64\-formatted fields in resource records into chunks of
\fIW\fR
characters (where
\fIW\fR
Tinderbox User's avatar
Tinderbox User committed
643
is rounded up to the nearest multiple of 4)\&.
Tinderbox User's avatar
Tinderbox User committed
644 645 646
\fI+nosplit\fR
or
\fI+split=0\fR
Tinderbox User's avatar
Tinderbox User committed
647
causes fields not to be split at all\&. The default is 56 characters, or 44 characters when multiline mode is active\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
648 649
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
650
\fB+[no]stats\fR
Tinderbox User's avatar
Tinderbox User committed
651
.RS 4
Tinderbox User's avatar
Tinderbox User committed
652
This query option toggles the printing of statistics: when the query was made, the size of the reply and so on\&. The default behavior is to print the query statistics\&.
Tinderbox User's avatar
Tinderbox User committed
653 654
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
655
\fB+[no]subnet=addr[/prefix\-length]\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
656
.RS 4
Tinderbox User's avatar
Tinderbox User committed
657 658 659 660
Send (don\*(Aqt send) an EDNS Client Subnet option with the specified IP address or network prefix\&.
.sp
\fBdig +subnet=0\&.0\&.0\&.0/0\fR, or simply
\fBdig +subnet=0\fR
Tinderbox User's avatar
Tinderbox User committed
661
for short, sends an EDNS CLIENT\-SUBNET option with an empty address and a source prefix\-length of zero, which signals a resolver that the client\*(Aqs address information must
Tinderbox User's avatar
Tinderbox User committed
662 663
\fInot\fR
be used when resolving this query\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
664 665
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
666 667 668 669 670
\fB+[no]tcflag\fR
.RS 4
Set [do not set] the TC (TrunCation) bit in the query\&. The default is +notcflag\&. This bit should be ignored by the server for QUERY\&.
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
671
\fB+[no]tcp\fR
Automatic Updater's avatar
Automatic Updater committed
672
.RS 4
Tinderbox User's avatar
Tinderbox User committed
673 674 675
Use [do not use] TCP when querying name servers\&. The default behavior is to use UDP unless a type
any
or
Tinderbox User's avatar
Tinderbox User committed
676
ixfr=N
Tinderbox User's avatar
Tinderbox User committed
677
query is requested, in which case the default is TCP\&. AXFR queries always use TCP\&.
Automatic Updater's avatar
Automatic Updater committed
678 679
.RE
.PP
Francis Dupont's avatar
Francis Dupont committed
680
\fB+timeout=T\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
681
.RS 4
Tinderbox User's avatar
Tinderbox User committed
682 683
Sets the timeout for a query to
\fIT\fR
Tinderbox User's avatar
Tinderbox User committed
684
seconds\&. The default timeout is 5 seconds\&. An attempt to set
Tinderbox User's avatar
Tinderbox User committed
685
\fIT\fR
Tinderbox User's avatar
Tinderbox User committed
686
to less than 1 will result in a query timeout of 1 second being applied\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
687 688
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
689
\fB+[no]topdown\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
690
.RS 4
Evan Hunt's avatar
Evan Hunt committed
691 692
This feature is related to
\fBdig +sigchase\fR, which is obsolete and has been removed\&. Use
Tinderbox User's avatar
Tinderbox User committed
693 694
\fBdelv\fR
instead\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
695 696
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
697
\fB+[no]trace\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
698
.RS 4
Tinderbox User's avatar
Tinderbox User committed
699
Toggle tracing of the delegation path from the root name servers for the name being looked up\&. Tracing is disabled by default\&. When tracing is enabled,
Tinderbox User's avatar
Tinderbox User committed
700
\fBdig\fR
Tinderbox User's avatar
Tinderbox User committed
701
makes iterative queries to resolve the name being looked up\&. It will follow referrals from the root servers, showing the answer from each server that was used to resolve the lookup\&.
Tinderbox User's avatar
Tinderbox User committed
702
.sp
Tinderbox User's avatar
Tinderbox User committed
703
If @server is also specified, it affects only the initial query for the root zone name servers\&.
Tinderbox User's avatar
Tinderbox User committed
704
.sp
Tinderbox User's avatar
Tinderbox User committed
705
\fB+dnssec\fR
Tinderbox User's avatar
Tinderbox User committed
706
is also set when +trace is set to better emulate the default queries from a nameserver\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
707 708
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
709
\fB+tries=T\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
710
.RS 4
Tinderbox User's avatar
Tinderbox User committed
711 712
Sets the number of times to try UDP queries to server to
\fIT\fR
Tinderbox User's avatar
Tinderbox User committed
713
instead of the default, 3\&. If
Tinderbox User's avatar
Tinderbox User committed
714
\fIT\fR
Tinderbox User's avatar
Tinderbox User committed
715
is less than or equal to zero, the number of tries is silently rounded up to 1\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
716 717
.RE
.PP
Rob Austein's avatar
regen  
Rob Austein committed
718
\fB+trusted\-key=####\fR
Automatic Updater's avatar
regen  
Automatic Updater committed
719
.RS 4
Evan Hunt's avatar
Evan Hunt committed
720 721
Formerly specified trusted keys for use with
\fBdig +sigchase\fR\&. This feature is now obsolete and has been removed; use
Tinderbox User's avatar
Tinderbox User committed
722 723
\fBdelv\fR
instead\&.
Automatic Updater's avatar
regen  
Automatic Updater committed
724 725
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
726
\fB+[no]ttlid\fR
Tinderbox User's avatar
Tinderbox User committed
727
.RS 4
Tinderbox User's avatar
Tinderbox User committed
728
Display [do not display] the TTL when printing the record\&.
Tinderbox User's avatar
Tinderbox User committed
729 730
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
731
\fB+[no]ttlunits\fR
Tinderbox User's avatar
Tinderbox User committed
732
.RS 4
Tinderbox User's avatar
Tinderbox User committed
733
Display [do not display] the TTL in friendly human\-readable time units of "s", "m", "h", "d", and "w", representing seconds, minutes, hours, days and weeks\&. Implies +ttlid\&.
Tinderbox User's avatar
Tinderbox User committed
734 735
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
736 737 738 739 740
\fB+[no]unknownformat\fR
.RS 4
Print all RDATA in unknown RR type presentation format (RFC 3597)\&. The default is to print RDATA for known types in the type\*(Aqs presentation format\&.
.RE
.PP
Tinderbox User's avatar
Tinderbox User committed
741
\fB+[no]vc\fR
Tinderbox User's avatar
Tinderbox User committed
742
.RS 4
Tinderbox User's avatar
Tinderbox User committed
743
Use [do not use] TCP when querying name servers\&. This alternate syntax to
Tinderbox User's avatar
Tinderbox User committed
744
\fI+[no]tcp\fR
Tinderbox User's avatar
Tinderbox User committed
745
is provided for backwards compatibility\&. The "vc" stands for "virtual circuit"\&.
Tinderbox User's avatar
Tinderbox User committed
746
.RE
Tinderbox User's avatar
Tinderbox User committed
747 748 749
.PP
\fB+[no]zflag\fR
.RS 4
Tinderbox User's avatar
Tinderbox User committed
750
Set [do not set] the last unassigned DNS header flag in a DNS query\&. This flag is off by default\&.
Tinderbox User's avatar
Tinderbox User committed
751
.RE
752 753
.SH "MULTIPLE QUERIES"
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
754 755 756 757
The BIND 9 implementation of
\fBdig \fR
supports specifying multiple queries on the command line (in addition to supporting the
\fB\-f\fR
Tinderbox User's avatar
Tinderbox User committed
758
batch file option)\&. Each of those queries can be supplied with its own set of flags, options and query options\&.
759
.PP
Automatic Updater's avatar
regen  
Automatic Updater committed
760 761
In this case, each
\fIquery\fR
Tinderbox User's avatar
Tinderbox User committed
762
argument represent an individual query in the command\-line syntax described above\&. Each consists of any of the standard options and flags, the name to be looked up, an optional query type and class and any query options that should be applied to that query\&.
763
.PP
Tinderbox User's avatar
Tinderbox User committed
764
A global set of query options, which should be applied to all queries, can also be supplied\&. These global query options must precede the first tuple of name, class, type, options, flags, and query options supplied on the command line\&. Any global query options (except
Automatic Updater's avatar
regen  
Automatic Updater committed
765
\fB+[no]cmd\fR
Tinderbox User's avatar
Tinderbox User committed
766 767 768
and
\fB+[no]short\fR
options) can be overridden by a query\-specific set of query options\&. For example:
Automatic Updater's avatar
regen  
Automatic Updater committed
769
.sp
Tinderbox User's avatar
Tinderbox User committed
770
.if n \{\
Automatic Updater's avatar
regen  
Automatic Updater committed
771
.RS 4
Tinderbox User's avatar
Tinderbox User committed
772
.\}
773
.nf
Tinderbox User's avatar
Tinderbox User committed
774
dig +qr www\&.isc\&.org any \-x 127\&.0\&.0\&.1 isc\&.org ns +noqr
775
.fi
Tinderbox User's avatar
Tinderbox User committed
776
.if n \{\
Automatic Updater's avatar
regen  
Automatic Updater committed
777
.RE
Tinderbox User's avatar
Tinderbox User committed
778
.\}
Automatic Updater's avatar