Questions tagged [dig]
dig is a command-line client to make queries against DNS servers, the Internet name servers.
224
questions
264
votes
11
answers
603k
views
List all DNS records in a domain using dig?
My company runs an internal DNS for mycompany.example
There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory.
...
- 3,215
167
votes
5
answers
221k
views
Force dig to resolve without using cache
I'm wondering if there is a way to query a DNS server and bypass caching (with dig). Often I change a zone on the DNS server and I want to check if it resolves correctly from my workstation. But since ...
- 3,117
128
votes
4
answers
211k
views
How can I see Time-To-Live (TTL) for a DNS record?
I would like to see the Time-To-Live (TTL) value for a CNAME record.
I have access to dig (on Apple Mac OS X), which gives me an answer like this:
% dig host.example.gov
<*SNIP*>
;; ANSWER ...
- 23.8k
85
votes
4
answers
93k
views
dig show only answer
I want dig only to show the answer of my query.
Normally, it prints out alot of additional info like this:
;; <<>> DiG 9.7.3 <<>> google.de
;; global options: +cmd
;; Got ...
- 4,213
42
votes
7
answers
34k
views
Why can host and nslookup resolve a name but dig cannot?
Can anyone tell me why this is happening? I can resolve a hostname using host and/or nslookup but forward lookups do not work with dig; reverse lookups do:
musashixxx@box:~$ host someserver
...
- 520
34
votes
3
answers
23k
views
Is dig +trace always accurate?
When the accuracy of a DNS cache is in question, dig +trace tends to be the recommended way of determining the authoritative answer for an internet facing DNS record. This seems to be particularly ...
- 32.8k
28
votes
4
answers
107k
views
sed replace all tabs and spaces with a single space
I got a string like the following:
test.de. 1547 IN SOA ns1.test.de. dnsmaster.test.de. 2012090701 900 1000 6000 600
now I want to replace all the tabs/spaces inbetween the ...
- 4,213
27
votes
3
answers
74k
views
What are all the flags in a dig response?
dig responses return flags in the comments section:
$ dig example.com +noall +comments
; <<>> DiG 9.8.3-P1 <<>> example.com +noall +comments
;; global options: +cmd
;; Got ...
- 407
25
votes
3
answers
23k
views
What's the difference between `dig` and `host` when querying a specific name-server?
I was using this command to verify if I'd set things up correctly with a DNS provider:
host hostname.example.com ns1.example-nameserver.com
As far as I can tell, this asks ns1.example-nameserver.com ...
- 381
25
votes
2
answers
23k
views
SOA and Primary NS record (DNS)
The brunt of the question is this -- What is the relationship between the primary nameserver specified in the SOA record and the nameservers specified in the NS records. How are these things linked?
...
- 490
17
votes
2
answers
25k
views
How do I ask "dig" to only return the IP from a CNAME record?
The dig +short command (such as described in "dig show only answer") is great for batch processing names into IP addresses. It does a simple job and does it well.
Unfortunately when there's a CNAME ...
- 1,034
17
votes
2
answers
3k
views
DNS Server Responses and Timeouts
We're experiencing a frustrating problem on our LAN. Periodically, DNS queries to our ISP nameservers timeout forcing a 5 second delay. Even if I bypass /etc/resolv.conf by using a direct dig to one ...
- 25.7k
14
votes
1
answer
25k
views
Dig timeout option don't work
When I try either of these commands they do not stop after 5 seconds:
$ dig +time=5 @hii.com hello.me
-or-
$ dig @hii.com hello.me +time=5
What is the correct way to use this option?
- 409
13
votes
2
answers
2k
views
How is my DNSSEC enabled domain still serving a tiny number of NXDOMAIN response codes?
I enabled DNSSEC on my primary domain about a week ago. It's not a major website or anything -- just my personal domain name that I use for email and the like (TLD: com; DNSSEC algorithm 13; ...
- 165
12
votes
4
answers
48k
views
DNS searching with wildcards?
Anything like nslookup or dig offer the ability to search based on something contained in the name ... like a wildcard search or something?
I'm trying to make a little script with a GUI wrapper for ...
- 1,152
12
votes
3
answers
45k
views
How to find what Authoritative Name Server provided the answer using dig?
I need to check the differences in records on master and slave when making changes.
Is there some option for dig to show which Authoritative Name Server provided the answer?
for example
dig example....
- 318
10
votes
4
answers
20k
views
Why doesn't `dig` show records?
Every time I use dig I get a vague feeling that I'm not really sure whether it's giving me correct data.
Now I've used it like this:
# dig socialimpactportfolio.com
; <<>> DiG 9.8.4-...
- 5,261
8
votes
4
answers
49k
views
Combining dig +short command
This command will show the output of MX record:
dig @ns1.myname.com myname.com +short MX
and this will output A record:
dig @ns1.myname.com myname.com +short A
My question is how to output both A ...
- 409
8
votes
1
answer
11k
views
Why do dig, host and nslookup return different results?
It seems my default (router) DNS server returns different results depending on the tool used to query it.
Using dig:
$ dig @192.168.1.2 test.example.com
; <<>> DiG 9.16.8-Debian <<&...
- 631
7
votes
1
answer
3k
views
Understanding the Difference Between DNS Resolvers
Intro
In the attempt to debug a networking issue local to our intranet, it became apparent that curl host nslookup and dig behave differently. Where dig and host returns the IP address of the URL in ...
- 225
7
votes
2
answers
6k
views
How to determine which DNS server has the authority to set rDNS (PTR records)?
or to re-phrase... How to determine to whom authority has been delegated to set rDNS?
Background
In a multi-tier environment, where a block of IP's is assigned, then further split and assigned (...
- 586
7
votes
4
answers
9k
views
bind not able to query some servers / domains
We have been experiencing problems with our company's DNS server when trying to resolve only certain domains, we are running BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 on a CentOS 6.5 server. We are ...
- 71
7
votes
3
answers
7k
views
able to dig a hostname but doesn't resolve via ssh or ping
I am using Snow Leopard and cannot ping or ssh into a host but am able to dig:
dig some.value.host.com
When the ip address comes back in the answer section, then I am able to ssh via ip address (
...
- 255
6
votes
3
answers
6k
views
Simple dig output?
In a script I want to be able to write an IP address to somewhere easily, so I thought using dig (or a similar command) with back-ticks.
However the simplest output I've been able to come up to wrt ...
- 357
6
votes
1
answer
15k
views
Querying and verifying dnssec
I hear http://www.isoc.org/ has Domain Name System Security Extensions on its DNS records.
How do I see and verify the DNS using the tool dig?
- 677
6
votes
2
answers
7k
views
Why is nslookup and dig giving me a "Warning: ID mismatch ... got 0" error?
I'm trying to troubleshoot some persistent connectivity issues and I'm frequently getting the following error message when using dig or nslookup.
bash$ nslookup
> www.google.com
;; Warning: ID ...
- 163
6
votes
4
answers
14k
views
DNS Subdomain delegation issue
(Updated the post with more detailed example)
I have my domain: example.com setup at DNS provider 1. Provider 1 has nameservers:
ns1.dns1.com
ns2.dns1.com
I want to delegate authority for subdomain....
- 63
6
votes
1
answer
2k
views
Why does dig +trace seem to ignore the DNS glue records?
Here are my questions:
Why does dig +trace ignore the Glue Records?
Is this behavior specific to dig or dig +trace, or does a recursive name server also "manually verify" glue records it receives?
...
- 193
5
votes
4
answers
16k
views
Determine if DNS server is master or slave with DiG
Is there a way to use DiG or nslookup to determine if a server is set to Master or Slave? And if a server is slave, return the Master's IP address?
- 219
5
votes
1
answer
2k
views
Why does dig +trace sometimes fail against Windows Server DNS?
My team has a server pointing at the DNS supplied by Active Directory to ensure that it is able to reach any hosts managed by the domain. Unfortunately, my team also needs to run dig +trace frequently ...
- 32.8k
5
votes
1
answer
17k
views
Using dig axfr to perform a zone transfer from a Windows Server 2012 DNS server
I'm working on setting up host auto-discovery for Nagios using DNS records.
When I try to use dig axfr to do a zone transfer (dig axfr local.domain.com), however, I get the following output:
[...
- 145
4
votes
3
answers
2k
views
Forcing the dig tool to return us answers from the root servers
When doing a dig over some site (i.e. www.nasa.gov) from different online dig tool sites(in this case, http://networking.ringofsaturn.com/Tools/dig.php and http://www.kloth.net/services/dig.php), I've ...
- 174
4
votes
2
answers
12k
views
resolv.conf options not being honored
Was hoping to implement the "options rotate" directive within resolv.conf to have DNS lookups rotate through the nameservers listed in that file. As I understand it that is the point of this directive....
- 2,457
4
votes
2
answers
2k
views
linux: shorter 'host' command output
I'm using dns to manage my virtual hosts. In order to do so I query my nameserver with the host command for certain values I need. For example:
> host -t txt mycl1.vz
mycl1.vz.myserver.de ...
- 401
4
votes
2
answers
13k
views
dig: "Transfer failed."
INPUT:
dig +multiline google.com axfr
OUTPUT:
; <<>> DiG 9.7.3-RedHat-9.7.3-1.fc14 <<>> +multiline google.com axfr
;; global options: +cmd
; Transfer failed.
What am I ...
- 3,107
4
votes
1
answer
7k
views
What does OPT PSEUDOSECTION mean in `dig` response?
This is part of the response when I run dig in terminal:
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
What does OPT mean? What does PSEUDOSECTION mean?
- 265
4
votes
1
answer
16k
views
dig output missing answer section
I recently got a new domain (lets call it testdomain.extample) from Route53 on Amazon. I further have a classic load balancer from AWS that I want requests to be forwarded to when somebody visits www....
- 149
4
votes
1
answer
25k
views
What would be causing a "recursion requested but not available" error using dbndns?
The tinydns and dnscache services are running and I have 127.0.0.1 in my resolv.conf:
root@ubuntu:~# cat /etc/resolv.conf
nameserver 127.0.0.1
domain localdomain
search localdomain
root@ubuntu:~# ...
- 51
4
votes
1
answer
10k
views
BIND/DNS - dig +trace = Bad Referral and Bad Horizontal Referral
I have an interesting problem. I started noticing that when I do a dig +trace against one of the domains we are authoritative for, we get errors from our nameservers for "Bad Referral" and you can see ...
- 639
4
votes
5
answers
10k
views
Discover server responsible for serving a PTR for a specific IP?
Just as the title reads: How do I discover what nameserver is the authoritative nameserver for PTR records for a specific IP?
- 2,457
3
votes
1
answer
1k
views
Why does TTL sometimes re-increment between DNS queries?
I dig xkcd.com, and I get something like this back:
; <<>> DiG 9.9.5-3ubuntu0.1-Ubuntu <<>> xkcd.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: ...
- 1,283
3
votes
2
answers
8k
views
Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?
I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
- 53
3
votes
1
answer
15k
views
Performing DNS queries starting with one of the root servers using dig command [closed]
I am having trouble understanding the question for my network assignment. The question states:
Discover the sequence of DNS servers your local DNS server with empty cache goes through when it find ...
- 333
3
votes
2
answers
25k
views
get NS record for domain using dig
I'm currently trying to write a script that validates, whether a given record attached to a name is available via all nameservers that are responsible for that name.
E.g. I would like to check ...
- 499
3
votes
1
answer
972
views
Sendmail MX Lookup fails, dig doesnt
Anyone able to explain this problem? I can do a dig or nslookup on a host and get the MX servers, but when I check through sendmail it fails?
RHEL 5.6
Sendmail:
(root)> sendmail -bt
ADDRESS TEST ...
- 31
3
votes
1
answer
3k
views
Google Public DNS is returning a SERVFAIL for my domain
Hope some one will help me in resolving the issue. My Domain name is "prohosterz.com"
Google Public DNS is returning a SERVFAIL for my domain:
$ dig prohosterz.com @8.8.8.8
; > DiG 9.9.2 > ...
- 31
3
votes
2
answers
2k
views
Domain Name Forwarding not working with github pages
I had my blog on github pages with a custom domain name blog.tamizhvendan.in and today I've moved it to a new domain name www.p3programmer.com by updating the CNAME record with www.p3programmer.com.
...
github
3
votes
1
answer
3k
views
Cannot find solution to "One or more of your nameservers did not return any of your NS records." on intoDNS site
I have set up DNS on my Linux Centos server and when I test on this site I get the following errors:
WARNING: One or more of your nameservers did not return any of your NS
records.
ERROR: ...
3
votes
1
answer
8k
views
dig succeeds, nslookup fails (with dnsmasq as the server)
I installed dnsmasq on a machine of mine (It's a Kubuntu 12.04 LTS), backed only by /etc/hosts (no connection to the Internet until later). Now, if I dig mymachine, I get 192.168.0.1, but if I try to ...
- 1,682
3
votes
2
answers
3k
views
DIG domain NS empty when no other records exist?
I asked our domain registrar to configure the name servers for a new domain. They said it was done so I checked:
dig example.com NS
Using Google's servers, this is what I get:
dig example.com NS
; ...
user60129