NAME¶
- kdig
- - Advanced DNS lookup utility (libknot equivalent of ISC dig)
SYNOPSIS¶
kdig [
common-settings] [
query [
settings]]...
- kdig -h
DESCRIPTION¶
This utility sends one or more DNS
queries to a nameserver. Each query
can have individual
settings, or it can be specified globally via
common-settings, which must precede
query specification.
- query
- name | -q name | -x address | -G
tapfile
- common-settings, settings
- [class] [type] [@server]...
[options]
- name
- Is a domain name that is to be looked up.
- server
- Is a domain name or an IPv4 or IPv6 address of the nameserver to send a
query to. An additional port can be specified using address:port
([address]:port for IPv6 address) or address@port or address#port
notation. If no server is specified, the servers from
/etc/resolv.conf are used.
- If no arguments are provided, kdig sends NS query for the
root zone.
OPTIONS¶
- -4
- Use IPv4 protocol only.
- -6
- Use IPv6 protocol only.
- -b address
- Set the source IP address of the query to address. The address must
be a valid address for local interface or :: or 0.0.0.0. Optional port can
be specified in the same format as server value.
- -c class
- Set query class (e.g. CH, CLASS4). An explicit variant of
class specification. The default class is IN.
- -d
- Enable debug messages if any.
- -h, --help
- Print short help.
- -k keyfile
- Use TSIG or SIG-0 key stored in a file keyfile to authenticate the
request. Supported file format is the same as generated by ISC
dnssec-keygen. The key comprises of public (.key extension) and
private part (.private extension). Either of these file names or a name
without the extension can be specified as keyfile parameter.
- -p port
- Set nameserver port number or service name to send a query to. The default
port is 53.
- -q name
- Set query name. An explicit variant of name specification.
- -t type
- Set query type (e.g. NS, IXFR=12345, TYPE65535). An
explicit variant of type specification. The default type is
A. It is also possible to use NOTIFY parameter to send a
notify message.
- -v, --version
- Print program version.
- -x address
- Send reverse (PTR) query for IPv4 or IPv6 address. Correct
name, class and type is set automatically.
- -y [algo:]keyname:key
- Use TSIG key with a name keyname to authenticate the request. The
algo part specifies the algorithm (the default is hmac-md5) and
key specifies the shared secret encoded in Base64.
- -E tapfile
- Export a dnstap trace of the query and response messages received to the
file tapfile.
- -G tapfile
- Generate message output from a previously saved dnstap file
tapfile.
- +[no]multiline
- Wrap long records to more lines and improve human readability.
- +[no]short
- Show record data only.
- +[no]aaflag
- Set AA flag.
- +[no]tcflag
- Set TC flag.
- +[no]rdflag
- Set RD flag.
- +[no]recurse
- Same as +[no]rdflag
- +[no]raflag
- Set RA flag.
- +[no]zflag
- Set zero flag bit.
- +[no]adflag
- Set AD flag.
- +[no]cdflag
- Set CD flag.
- +[no]dnssec
- Set DO flag.
- +[no]all
- Show all packet sections.
- +[no]qr
- Show query packet.
- +[no]header
- Show packet header.
- +[no]opt
- Show EDNS pseudosection.
- +[no]question
- Show question section.
- +[no]answer
- Show answer section.
- +[no]authority
- Show authority section.
- +[no]additional
- Show additional section.
- +[no]tsig
- Show TSIG pseudosection.
- +[no]stats
- Show trailing packet statistics.
- +[no]class
- Show DNS class.
- +[no]ttl
- Show TTL value.
- +[no]tcp
- Use TCP protocol (default is UDP for standard query and TCP for
AXFR/IXFR).
- +[no]fail
- Stop querying next nameserver if SERVFAIL response is received.
- +[no]ignore
- Don't use TCP automatically if truncated reply is received.
- +[no]nsid
- Request nameserver identifier (NSID).
- +[no]edns=N
- Use EDNS version (default is 0).
- +noidn
- Disable IDN transformation to ASCII and vice versa. IDNA2003 support
depends on libidn availability during project building!
- +client=SUBN
- Set EDNS client subnet SUBN=IP/prefix.
- +time=T
- Set wait for reply interval in seconds (default is 5 seconds). This
timeout applies to each query try.
- +retry=N
- Set number (>=0) of UDP retries (default is 2). This doesn't apply to
AXFR/IXFR.
- +bufsize=B
- Set EDNS buffer size in bytes (default is 512 bytes).
NOTE¶
Options
-k and
-y cannot be used mutually.
Missing features with regard to ISC dig¶
Options
-f and
-m and query options:
+split=W,
+tries=T,
+ndots=D,
+domain=somename,
+trusted-key=####,
+[
no]
vc,
+[
no]
search,
+[
no]
showsearch,
+[
no]
defname,
+[
no]
aaonly,
+[
no]
cmd,
+[
no]
identify,
+[
no]
comments,
+[
no]
rrcomments,
+[
no]
onesoa,
+[
no]
besteffort,
+[
no]
sigchase,
+[
no]
topdown,
+[
no]
nssearch,
+[
no]
trace.
- Per-user file configuration via ${HOME}/.digrc.
EXAMPLES¶
Example 1. Get A record for example.com:
- # kdig example.com A
- Example 2. Perform AXFR for zone example.com from the server
192.0.2.1:
- # kdig example.com -t AXFR @192.0.2.1
- Example 3. Get A record for example.com from 192.0.2.1 and reverse
lookup for address 2001:DB8::1 from 192.0.2.2. Both using TCP
protocol:
- # kdig +tcp example.com -t A @192.0.2.1 -x 2001:DB8::1 @192.0.2.2
FILES¶
/etc/resolv.conf
AUTHOR¶
Daniel Salzman (
www.knot-dns.cz)
- Please send any bug reports or comments to
knot-dns@labs.nic.cz
SEE ALSO¶
khost(1),
knsupdate(1).
