dig is a command-line client to make queries against DNS servers, the Internet name servers.

learn more… | top users | synonyms

24
votes
2answers
10k views

Is dig +trace always accurate?

When the accuracy of a DNS cache is in question, dig +trace tends to be the recommended way of determining the authoritative answer for an internet facing DNS record. This seems to be particularly ...
66
votes
4answers
97k views

How can I see Time-To-Live (TTL) for a DNS record?

I would like to see the Time-To-Live (TTL) value for a CNAME record. I have access to dig (on Apple Mac OS X), which gives me an answer like this: % dig host.example.gov <*SNIP*> ;; ANSWER ...
42
votes
3answers
28k views

Force dig to resolve without using cache

I'm wondering if there is a way to query a DNS server and bypass caching (with dig). Often I change a zone on the DNS server and I want to check if it resolves correctly from my workstation. But since ...
0
votes
2answers
799 views

Dig -x equivalent for AWS Route 53

I have an IP number associated with an AWS Elastic IP (EIP). I'd like to know, what DNS records in my Route 53 domain are associated with that A record's IP. In a traditional DNS service, I would ...
3
votes
1answer
188 views

Why does TTL sometimes re-increment between DNS queries?

I dig xkcd.com, and I get something like this back: ; <<>> DiG 9.9.5-3ubuntu0.1-Ubuntu <<>> xkcd.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: ...
2
votes
1answer
2k views

DNS resolve timeout on RHEL 6.3 behind firewall

I have a server running Red Hat 6.3 Enterprise inside a VMWare virtual machine. There's a Juniper SSG 5 firewall sitting between the server and the Internet. I'm trying to diagnose what it looks like ...
81
votes
6answers
164k views

List all DNS records in a domain using dig?

My company runs an internal DNS for mycompany.com There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory. How ...
10
votes
2answers
8k views

SOA and Primary NS record (DNS)

The brunt of the question is this -- What is the relationship between the primary nameserver specified in the SOA record and the nameservers specified in the NS records. How are these things linked? ...
1
vote
2answers
7k views

Why don't DNS root servers answer?

If I try to query a root server with dig, I never receive an answer. For example the output for dig @b.root-servers.net www.ubuntu.com is ; <<>> DiG 9.8.1-P1 <<>> @b.root-servers.net ...
1
vote
3answers
463 views

What is the best way to get PRECISE domain name from ip address logged in iptables log

In iptables I am logging certain public IP addresses... say of websites visited from different workstations, depending on destination port number... All this is not really relevant to the question but ...
0
votes
2answers
2k views

Dig vs Whois on Nameserver Update and Reference to Unknown FQDN?

After running a dig on an old domain name moved from an old server to a new one, completely different IP and provider, I ran a dig and found that the listed nameserver does not match the one in the ...
2
votes
4answers
5k views

DNS Subdomain delegation issue

(Updated the post with more detailed example) I have my domain: example.com setup at DNS provider 1. Provider 1 has nameservers: ns1.dns1.com ns2.dns1.com I want to delegate authority for ...