1MDIG(1) BIND9 MDIG(1)
2
6 mdig - DNS pipelined lookup utility
7
9 mdig {@server} [-f filename] [-h] [-v] [[-4] | [-6]] [-m] [-b address]
10 [-p port#] [-c class] [-t type] [-i] [-x addr] [plusopt...]
11 mdig {-h}
13 mdig [@server] {global-opt...} {{local-opt...} {query}...}
15
17 mdig is a multiple/pipelined query version of dig: instead of waiting
18 for a response after sending each query, it begins by sending all
19 queries. Responses are displayed in the order in which they are
20 received, not in the order the corresponding queries were sent.
21 mdig options are a subset of the dig options, and are divided into
23 "anywhere options" which can occur anywhere, "global options" which
24 must occur before the query name (or they are ignored with a warning),
25 and "local options" which apply to the next query on the command line.
26 The {@server} option is a mandatory global option. It is the name or IP
28 address of the name server to query. (Unlike dig, this value is not
29 retrieved from /etc/resolv.conf.) It can be an IPv4 address in
30 dotted-decimal notation, an IPv6 address in colon-delimited notation,
31 or a hostname. When the supplied server argument is a hostname, mdig
32 resolves that name before querying the name server.
33 mdig provides a number of query options which affect the way in which
35 lookups are made and the results displayed. Some of these set or reset
36 flag bits in the query header, some determine which sections of the
37 answer get printed, and others determine the timeout and retry
38 strategies.
39 Each query option is identified by a keyword preceded by a plus sign
41 (+). Some keywords set or reset an option. These may be preceded by the
42 string no to negate the meaning of that keyword. Other keywords assign
43 values to options like the timeout interval. They have the form
44 +keyword=value.
45
47 The -f option makes mdig operate in batch mode by reading a list of
48 lookup requests to process from the file filename. The file contains a
49 number of queries, one per line. Each entry in the file should be
50 organized in the same way they would be presented as queries to mdig
51 using the command-line interface.
52 The -h causes mdig to print the detailed help with the full list of
54 options and exit.
55 The -v causes mdig to print the version number and exit.
57
59 The -4 option forces mdig to only use IPv4 query transport.
60 The -6 option forces mdig to only use IPv6 query transport.
62 The -b option sets the source IP address of the query to address. This
64 must be a valid address on one of the host's network interfaces or
65 "0.0.0.0" or "::". An optional port may be specified by appending
66 "#<port>"
67 The -m option enables memory usage debugging.
69 The -p option is used when a non-standard port number is to be queried.
71 port# is the port number that mdig will send its queries instead of the
72 standard DNS port number 53. This option would be used to test a name
73 server that has been configured to listen for queries on a non-standard
74 port number.
75 The global query options are:
77 +[no]additional
79 Display [do not display] the additional section of a reply. The
80 default is to display it.
81 +[no]all
83 Set or clear all display flags.
84 +[no]answer
86 Display [do not display] the answer section of a reply. The default
87 is to display it.
88 +[no]authority
90 Display [do not display] the authority section of a reply. The
91 default is to display it.
92 +[no]besteffort
94 Attempt to display the contents of messages which are malformed.
95 The default is to not display malformed answers.
96 +burst
98 This option delays queries until the start of the next second.
99 +[no]cl
101 Display [do not display] the CLASS when printing the record.
102 +[no]comments
104 Toggle the display of comment lines in the output. The default is
105 to print comments.
106 +[no]continue
108 Continue on errors (e.g. timeouts).
109 +[no]crypto
111 Toggle the display of cryptographic fields in DNSSEC records. The
112 contents of these field are unnecessary to debug most DNSSEC
113 validation failures and removing them makes it easier to see the
114 common failures. The default is to display the fields. When omitted
115 they are replaced by the string "[omitted]" or in the DNSKEY case
116 the key id is displayed as the replacement, e.g. "[ key id = value
117 ]".
118 +dscp[=value]
120 Set the DSCP code point to be used when sending the query. Valid
121 DSCP code points are in the range [0..63]. By default no code point
122 is explicitly set.
123 +[no]multiline
125 Print records like the SOA records in a verbose multi-line format
126 with human-readable comments. The default is to print each record
127 on a single line, to facilitate machine parsing of the mdig output.
128 +[no]question
130 Print [do not print] the question section of a query when an answer
131 is returned. The default is to print the question section as a
132 comment.
133 +[no]rrcomments
135 Toggle the display of per-record comments in the output (for
136 example, human-readable key information about DNSKEY records). The
137 default is not to print record comments unless multiline mode is
138 active.
139 +[no]short
141 Provide a terse answer. The default is to print the answer in a
142 verbose form.
143 +split=W
145 Split long hex- or base64-formatted fields in resource records into
146 chunks of W characters (where W is rounded up to the nearest
147 multiple of 4). +nosplit or +split=0 causes fields not to be split
148 at all. The default is 56 characters, or 44 characters when
149 multiline mode is active.
150 +[no]tcp
152 Use [do not use] TCP when querying name servers. The default
153 behavior is to use UDP.
154 +[no]ttlid
156 Display [do not display] the TTL when printing the record.
157 +[no]ttlunits
159 Display [do not display] the TTL in friendly human-readable time
160 units of "s", "m", "h", "d", and "w", representing seconds,
161 minutes, hours, days and weeks. Implies +ttlid.
162 +[no]vc
164 Use [do not use] TCP when querying name servers. This alternate
165 syntax to +[no]tcp is provided for backwards compatibility. The
166 "vc" stands for "virtual circuit".
167
169 The -c option sets the query class to class. It can be any valid query
170 class which is supported in BIND 9. The default query class is "IN".
171 The -t option sets the query type to type. It can be any valid query
173 type which is supported in BIND 9. The default query type is "A",
174 unless the -x option is supplied to indicate a reverse lookup with the
175 "PTR" query type.
176 The -i option sets the reverse domain for IPv6 addresses to IP6.INT.
178 Reverse lookups — mapping addresses to names — are simplified by the -x
180 option. addr is an IPv4 address in dotted-decimal notation, or a
181 colon-delimited IPv6 address. mdig automatically performs a lookup for
182 a query name like 11.12.13.10.in-addr.arpa and sets the query type and
183 class to PTR and IN respectively. By default, IPv6 addresses are looked
184 up using nibble format under the IP6.ARPA domain. To use the older
185 RFC1886 method using the IP6.INT domain specify the -i option.
186 The local query options are:
188 +[no]aaflag
190 A synonym for +[no]aaonly.
191 +[no]aaonly
193 Sets the "aa" flag in the query.
194 +[no]adflag
196 Set [do not set] the AD (authentic data) bit in the query. This
197 requests the server to return whether all of the answer and
198 authority sections have all been validated as secure according to
199 the security policy of the server. AD=1 indicates that all records
200 have been validated as secure and the answer is not from a OPT-OUT
201 range. AD=0 indicate that some part of the answer was insecure or
202 not validated. This bit is set by default.
203 +bufsize=B
205 Set the UDP message buffer size advertised using EDNS0 to B bytes.
206 The maximum and minimum sizes of this buffer are 65535 and 0
207 respectively. Values outside this range are rounded up or down
208 appropriately. Values other than zero will cause a EDNS query to be
209 sent.
210 +[no]cdflag
212 Set [do not set] the CD (checking disabled) bit in the query. This
213 requests the server to not perform DNSSEC validation of responses.
214 +[no]cookie[=####]
216 Send a COOKIE EDNS option, with optional value. Replaying a COOKIE
217 from a previous response will allow the server to identify a
218 previous client. The default is +nocookie.
219 +[no]dnssec
221 Requests DNSSEC records be sent by setting the DNSSEC OK bit (DO)
222 in the OPT record in the additional section of the query.
223 +[no]edns[=#]
225 Specify the EDNS version to query with. Valid values are 0 to 255.
226 Setting the EDNS version will cause a EDNS query to be sent.
227 +noedns clears the remembered EDNS version. EDNS is set to 0 by
228 default.
229 +[no]ednsflags[=#]
231 Set the must-be-zero EDNS flags bits (Z bits) to the specified
232 value. Decimal, hex and octal encodings are accepted. Setting a
233 named flag (e.g. DO) will silently be ignored. By default, no Z
234 bits are set.
235 +[no]ednsopt[=code[:value]]
237 Specify EDNS option with code point code and optionally payload of
238 value as a hexadecimal string. +noednsopt clears the EDNS options
239 to be sent.
240 +[no]expire
242 Send an EDNS Expire option.
243 +[no]nsid
245 Include an EDNS name server ID request when sending a query.
246 +[no]recurse
248 Toggle the setting of the RD (recursion desired) bit in the query.
249 This bit is set by default, which means mdig normally sends
250 recursive queries.
251 +retry=T
253 Sets the number of times to retry UDP queries to server to T
254 instead of the default, 2. Unlike +tries, this does not include the
255 initial query.
256 +[no]subnet=addr[/prefix-length]
258 Send (don't send) an EDNS Client Subnet option with the specified
259 IP address or network prefix.
260 mdig +subnet=0.0.0.0/0, or simply mdig +subnet=0 for short, sends
262 an EDNS client-subnet option with an empty address and a source
263 prefix-length of zero, which signals a resolver that the client's
264 address information must not be used when resolving this query.
265 +timeout=T
267 Sets the timeout for a query to T seconds. The default timeout is 5
268 seconds for UDP transport and 10 for TCP. An attempt to set T to
269 less than 1 will result in a query timeout of 1 second being
270 applied.
271 +tries=T
273 Sets the number of times to try UDP queries to server to T instead
274 of the default, 3. If T is less than or equal to zero, the number
275 of tries is silently rounded up to 1.
276 +udptimeout=T
278 Sets the timeout between UDP query retries.
279 +[no]unknownformat
281 Print all RDATA in unknown RR type presentation format (RFC 3597).
282 The default is to print RDATA for known types in the type's
283 presentation format.
284 +[no]zflag
286 Set [do not set] the last unassigned DNS header flag in a DNS
287 query. This flag is off by default.
288
290 dig(1), RFC1035.
291
293 Internet Systems Consortium, Inc.
294
296 Copyright © 2015-2021 Internet Systems Consortium, Inc. ("ISC")
297ISC 2015-01-05 MDIG(1)