📄 dig.1
字号:
.\" Copyright (C) 2004 Internet Systems Consortium, Inc. ("ISC").\" Copyright (C) 2000-2003 Internet Software Consortium..\".\" Permission to use, copy, modify, and distribute this software for any.\" purpose with or without fee is hereby granted, provided that the above.\" copyright notice and this permission notice appear in all copies..\".\" THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH.\" REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY.\" AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,.\" INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM.\" LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE.\" OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR.\" PERFORMANCE OF THIS SOFTWARE..\".\" $Id: dig.1,v 1.14.2.4.2.6 2004/06/23 09:11:01 marka Exp $.\".TH "DIG" "1" "Jun 30, 2000" "BIND9" "".SH NAMEdig \- DNS lookup utility.SH SYNOPSIS.sp\fBdig\fR [ \fB@server\fR ] [ \fB-b \fIaddress\fB\fR ] [ \fB-c \fIclass\fB\fR ] [ \fB-f \fIfilename\fB\fR ] [ \fB-k \fIfilename\fB\fR ] [ \fB-p \fIport#\fB\fR ] [ \fB-t \fItype\fB\fR ] [ \fB-x \fIaddr\fB\fR ] [ \fB-y \fIname:key\fB\fR ] [ \fB-4\fR ] [ \fB-6\fR ] [ \fBname\fR ] [ \fBtype\fR ] [ \fBclass\fR ] [ \fBqueryopt\fR\fI...\fR ] .sp\fBdig\fR [ \fB-h\fR ] .sp\fBdig\fR [ \fBglobal-queryopt\fR\fI...\fR ] [ \fBquery\fR\fI...\fR ] .SH "DESCRIPTION".PP\fBdig\fR (domain information groper) is a flexible toolfor interrogating DNS name servers. It performs DNS lookups anddisplays the answers that are returned from the name server(s) thatwere queried. Most DNS administrators use \fBdig\fR totroubleshoot DNS problems because of its flexibility, ease of use andclarity of output. Other lookup tools tend to have less functionalitythan \fBdig\fR..PPAlthough \fBdig\fR is normally used with command-linearguments, it also has a batch mode of operation for reading lookuprequests from a file. A brief summary of its command-line argumentsand options is printed when the \fB-h\fR option is given.Unlike earlier versions, the BIND9 implementation of\fBdig\fR allows multiple lookups to be issued from thecommand line..PPUnless it is told to query a specific name server,\fBdig\fR will try each of the servers listed in\fI/etc/resolv.conf\fR..PPWhen no command line arguments or options are given, will perform anNS query for "." (the root)..PPIt is possible to set per-user defaults for \fBdig\fR via\fI${HOME}/.digrc\fR. This file is read and any options in itare applied before the command line arguments..SH "SIMPLE USAGE".PPA typical invocation of \fBdig\fR looks like:.sp.nf dig @server name type .sp.fiwhere:.TP\fBserver\fRis the name or IP address of the name server to query. This can be an IPv4address in dotted-decimal notation or an IPv6address in colon-delimited notation. When the supplied\fIserver\fR argument is a hostname,\fBdig\fR resolves that name before querying that nameserver. If no \fIserver\fR argument is provided,\fBdig\fR consults \fI/etc/resolv.conf\fRand queries the name servers listed there. The reply from the nameserver that responds is displayed..TP\fBname\fRis the name of the resource record that is to be looked up..TP\fBtype\fRindicates what type of query is required \(emANY, A, MX, SIG, etc.\fItype\fR can be any valid query type. If no\fItype\fR argument is supplied,\fBdig\fR will perform a lookup for an A record..SH "OPTIONS".PPThe \fB-b\fR option sets the source IP address of the queryto \fIaddress\fR. This must be a valid address onone of the host's network interfaces or "0.0.0.0" or "::". An optional portmay be specified by appending "#<port>".PPThe default query class (IN for internet) is overridden by the\fB-c\fR option. \fIclass\fR is any validclass, such as HS for Hesiod records or CH for CHAOSNET records..PPThe \fB-f\fR option makes \fBdig \fR operatein batch mode by reading a list of lookup requests to process from thefile \fIfilename\fR. The file contains a number ofqueries, one per line. Each entry in the file should be organised inthe same way they would be presented as queries to\fBdig\fR using the command-line interface..PPIf a non-standard port number is to be queried, the\fB-p\fR option is used. \fIport#\fR isthe port number that \fBdig\fR will send its queriesinstead of the standard DNS port number 53. This option would be usedto test a name server that has been configured to listen for querieson a non-standard port number..PPThe \fB-4\fR option forces \fBdig\fR to onlyuse IPv4 query transport. The \fB-6\fR option forces\fBdig\fR to only use IPv6 query transport..PPThe \fB-t\fR option sets the query type to\fItype\fR. It can be any valid query type which issupported in BIND9. The default query type "A", unless the\fB-x\fR option is supplied to indicate a reverse lookup.A zone transfer can be requested by specifying a type of AXFR. Whenan incremental zone transfer (IXFR) is required,\fItype\fR is set to ixfr=N.The incremental zone transfer will contain the changes made to the zonesince the serial number in the zone's SOA record was\fIN\fR..PPReverse lookups - mapping addresses to names - are simplified by the\fB-x\fR option. \fIaddr\fR is an IPv4address in dotted-decimal notation, or a colon-delimited IPv6 address.When this option is used, there is no need to provide the\fIname\fR, \fIclass\fR and\fItype\fR arguments. \fBdig\fRautomatically performs a lookup for a name like11.12.13.10.in-addr.arpa and sets the query type andclass to PTR and IN respectively. By default, IPv6 addresses arelooked up using nibble format under the IP6.ARPA domain.To use the older RFC1886 method using the IP6.INT domain specify the \fB-i\fR option. Bit string labels (RFC2874)are now experimental and are not attempted..PPTo sign the DNS queries sent by \fBdig\fR and theirresponses using transaction signatures (TSIG), specify a TSIG key fileusing the \fB-k\fR option. You can also specify the TSIGkey itself on the command line using the \fB-y\fR option;\fIname\fR is the name of the TSIG key and\fIkey\fR is the actual key. The key is a base-64encoded string, typically generated by \fBdnssec-keygen\fR(8).Caution should be taken when using the \fB-y\fR option onmulti-user systems as the key can be visible in the output from\fBps\fR(1) or in the shell's history file. Whenusing TSIG authentication with \fBdig\fR, the nameserver that is queried needs to know the key and algorithm that isbeing used. In BIND, this is done by providing appropriate\fBkey\fR and \fBserver\fR statements in\fInamed.conf\fR..SH "QUERY OPTIONS".PP\fBdig\fR provides a number of query options which affectthe way in which lookups are made and the results displayed. Some ofthese set or reset flag bits in the query header, some determine whichsections of the answer get printed, and others determine the timeoutand retry strategies..PPEach query option is identified by a keyword preceded by a plus sign(+). Some keywords set or reset an option. These may be precededby the string no to negate the meaning of that keyword. Otherkeywords assign values to options like the timeout interval. Theyhave the form \fB+keyword=value\fR.The query options are:.TP\fB+[no]tcp\fRUse [do not use] TCP when querying name servers. The defaultbehaviour is to use UDP unless an AXFR or IXFR query is requested, inwhich case a TCP connection is used..TP\fB+[no]vc\fRUse [do not use] TCP when querying name servers. This alternatesyntax to \fI+[no]tcp\fR is provided for backwardscompatibility. The "vc" stands for "virtual circuit"..TP\fB+[no]ignore\fRIgnore truncation in UDP responses instead of retrying with TCP. Bydefault, TCP retries are performed..TP\fB+domain=somename\fRSet the search list to contain the single domain\fIsomename\fR, as if specified in a\fBdomain\fR directive in\fI/etc/resolv.conf\fR, and enable search listprocessing as if the \fI+search\fR option were given..TP\fB+[no]search\fRUse [do not use] the search list defined by the searchlist or domaindirective in \fIresolv.conf\fR (if any).The search list is not used by default..TP\fB+[no]defname\fRDeprecated, treated as a synonym for \fI+[no]search\fR.TP\fB+[no]aaonly\fRSets the "aa" flag in the query..TP
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -