Questions tagged [dig]
dig is a command-line client to make queries against DNS servers, the Internet name servers.
197
questions
0
votes
1answer
76 views
Listing all the IPs of a given domain name with dig
I wanted to check what's the full list of IPs of a given website (for instance, google.ch). Running dig consistently returns me the same IP:
dig google.ch
google.ch. 136 IN A ...
1
vote
1answer
29 views
What is the difference between dig +tries=x and dig +retries=x?
I have been looking at the dig documentation and don't understand the difference between dig +tries=x and dig +retries=x. Can someone explain please?
0
votes
0answers
54 views
Dnsperf dns caching
i installed dnsperf with unbound and i'm looking to cache a list of DNS records on my centos server
i use dnsperf to cache a list dns
[root@mail bin]# cat domains.txt
facebook.com. MX
google.com. MX
...
0
votes
0answers
53 views
dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL
I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
0
votes
2answers
45 views
dig all txt records
When I run the dig command, I only get one txt record:
adriano@vm ~ dig swisspass.ch txt ✔ 4501 14:25:36
; <&...
0
votes
0answers
57 views
Is there a limit on length of CNAME chain in getaddrinfo lookup?
Update 1
I changed the nameserver in /etc/resolv.conf and that fixes the problem, but it will cause issues with internal name resolutions. So what does it mean? dig querying the same NS gets all 7 ...
1
vote
1answer
87 views
Migrating domain from AWS Route S3 to Linode
I want to migrate 1 domain from AWS Route S3 to Linode; I've changed the NS recods to point to
ns1.linode.com
ns2.linode.com
ns3.linode.com
ns4.linode.com
ns5.linode.com
but on the DNS checket it ...
0
votes
1answer
118 views
Dig +trace doesn't display the whole delegation chain
When I trace the DNS lookup of google.com for example, dig displays only the request to the root server and then goes straight to the 2nd level domain servers, skipping the top level domain. In other ...
5
votes
1answer
2k views
Why do dig, host and nslookup return different results?
It seems my default (router) DNS server returns different results depending on the tool used to query it.
Using dig:
$ dig @192.168.1.2 test.example.com
; <<>> DiG 9.16.8-Debian <<&...
0
votes
2answers
34 views
Site not resolving uniformly
My site www.acurent.com is not resolving to its IP address 23.20.46.124 uniformly
Check on: https://www.whatsmydns.net/#A/acurent.com, it shows that its resolving for certain networks only. If you ...
0
votes
1answer
68 views
Understanding TTL values in DNS query answers using dig
I'm querying google.com with dig and I'm having a hard time understanding why TTL values sometimes jump around instead of decrementing every second uniformly (which is my expectation). What am I ...
0
votes
0answers
92 views
How to lookup DNS Record in specific zone
For example I have a zone example.com and someone created a dotted hostname app.subzone which resolves to app.subzone.example.com in it.
Now I create a new zone subzone.example.com and an record appin ...
-2
votes
1answer
202 views
dig shows SERVFAIL , while pointing at nameserver works fine
somewhat similar to this thread, I faced with a problem where dig blah.net (for the sake of simplicity let's call it blah.net) returns status: SERVFAIL
This DNS zone is hosted on route53, and I use ...
0
votes
1answer
131 views
avahi-resolve resolves hostname that dig -p 5353 @224.0.0.251 does not?
I thought avahi-resolve and dig -p 5353 @224.0.0.251 did much the same thing.
However, I have a device where I can resolve its name using avahi-resolve but not using dig:
$ avahi-resolve --name ding-...
0
votes
1answer
1k views
What does OPT PSEUDOSECTION mean in `dig` response?
This is part of the response when I run dig in terminal:
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
What does OPT mean? What does PSEUDOSECTION mean?
0
votes
1answer
88 views
Command line dig tool doesn't get answer for SOA query, while https://toolbox.googleapps.com/apps/dig/#SOA/ DOES
While running in my windows 10 64bits machine this command: dig gmail-smtp-in.l.google.com ANY
I get this response
; <<>> DiG 9.16.2 <<>> gmail-smtp-in.l.google.com ANY
;; ...
-1
votes
2answers
522 views
Setting up my own nameserver on Freedom domain
I need to configure a DNS on a new domain registered on freenom.com as follows
Domain: mydomain.ga
My Server IP: 1.2.3.4
My need is to ask mydomain.ga (1.2.3.4) for a specific subdomain (for ...
1
vote
1answer
276 views
Are horizontal referrals in DNS allowed?
I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command:
BAD (HORIZONTAL) REFERRAL
From my understanding, this is caused due to delegating a ...
0
votes
1answer
85 views
Rate-limiting of dig [closed]
I have a PHP script that calls the bash dig command through the exec function on Ubuntu to monitor hundreds of domains.
What the script does is to call dig to fetch some DNS records on each domain ...
0
votes
1answer
133 views
ping resolves hostname but dig does not [closed]
I'm attempting to set up FreeIPA on a Centos KVM guest and one of the prerequisites is to make sure static hostname is set and that the hostname resolves to guest's IP address. My /etc/hosts file is ...
0
votes
1answer
945 views
SRV Record not working GoDaddy HTTPS on separate port
I'm having trouble setting up an office with one public IP and multiple web services running on separate ports. One of the services is a media server and I'm trying to add an SRV record to godaddy in ...
-2
votes
1answer
266 views
Intermittent DNS failures [closed]
We have intermittent DNS failures. Upon troubleshooting we found from our server, (where the domain is pointed to) gives connection timeout when queried against few TLD ns.
Ex: dig domain @tldns (...
0
votes
1answer
231 views
How to verify which DNS server actually answered a request when it's forwarded?
ISC BIND has a tool named dig that allows us to send a DNS request to a DNS server set on parameter and see what that server answers.
I wanted to know if that DNS server answered based on its cache, ...
0
votes
1answer
103 views
Different IP for same FQDN using different resolver
For my domain gobudgie.ml I get different IPs on different DNS resolver eg.:
jasmich.ml@8.8.4.4 (Default):
jasmich.ml. 964 IN A 31.17.211.88
jasmich.ml@1.1.1.1 (CloudFlare):
jasmich.ml. ...
0
votes
1answer
45 views
Unable to make NS queries against bind with catchall configuration
I've configured bind to catch all domains and return the same ip (A record) for them. This is for a domain parking service where there might be thousands of domains involved.
After pointing the ...
0
votes
1answer
27 views
Nameserver response has no authoritative bit set
I know that the authoritative name servers for google.com are ns1-4.google.com.
Now, I do this:
dig google.com @ns1.google.com
And the response is:
; <<>> DiG 9.11.3-1ubuntu1.8-Ubuntu &...
-2
votes
2answers
806 views
Can I get all the virtual IP addresses given the CNAME
Is there a way to find all the aliases of the host?
$ nslookup x
x is an alias for y
y is an alias for z
z has address 192.0.2.45
So if I have z, is there a way of using nslookup/host/dig commands ...
2
votes
1answer
330 views
Windows dig shows no answer section
I downloaded BIND from https://www.isc.org/download/ and installed it following https://nil.uniza.sk/how-install-dig-dns-tool-windows-7. When I run dig it does not show any answer section. For example:...
0
votes
0answers
115 views
dns NXDOMAIN error with external view
we are trying to configure a bind9 server. We have two different views, one for the internal zone (dmz) and another for external users who want to access to the dmz web.
The problem is that we may be ...
9
votes
2answers
9k views
How do I ask “dig” to only return the IP from a CNAME record?
The dig +short command (such as described in "dig show only answer") is great for batch processing names into IP addresses. It does a simple job and does it well.
Unfortunately when there's a CNAME ...
2
votes
1answer
6k views
dig output missing answer section
I recently got a new domain (lets call it testdomain.extample) from Route53 on Amazon. I further have a classic load balancer from AWS that I want requests to be forwarded to when somebody visits www....
0
votes
1answer
401 views
Why does ping to FQDN fails, but dig succeed?
When I try to ping a certain FQDN, I fail:
$ ping test-customer-1.clients.jsonar.com
ping: test-customer-1.clients.jsonar.com: Name or service not known
However, dig et al. succeeds:
$ dig test-...
0
votes
0answers
3k views
Dig +trace not working, while +notrace works
I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver.
dig @192....
0
votes
2answers
128 views
Scrape subdomain IPs using PTR records
I'm looking for a solution to an obscure problem. For security policy reasons we have a workstation using PeerBlock with a block list that essentially blacklists the entire internet, and then an allow ...
0
votes
1answer
3k views
DIG: always get a status: FORMERR
I'm under ubuntu 18.04, having DNS issues, so I am using dig command to debug my DNS.
Thing is when I dig a site like redhat.com, or a well configured DNS of mine, I always get a FORMERR status, and ...
1
vote
0answers
220 views
Is there a way to force dig to query an authoritative server?
I often find myself doing:
dig www.example.com @$(dig NS example.com +short | head -n 1)
It's a bit like doing a dig +trace www.example.com but starting from the NS of example.com instead of ...
1
vote
0answers
2k views
Why is ADDITIONAL SECTION missing from my dig response?
I have a couple bind servers recently upgraded to Ubuntu 16.04 (from 14.04). Cron runs dig . ns once a day to grab an updated list of Root servers used in the bind configuration.
The script run by ...
1
vote
1answer
51 views
Why does my website's locally retrieved name server appear different from one retrieved online?
My website is not resolving correctly, so I checked the name server via nslookup in PowerShell and see bodis.com. Then I checked online, hoping I checked the same name server, and see domaincontrol....
0
votes
1answer
79 views
DNS server with bind in Debian 9
I have a project to do for college. The project is a DNS server with client. I created the DNS server but when I want to see how it works I use the command dig myservername.
How can I proceed to see ...
0
votes
2answers
361 views
dig - how return NS from authority only
How I can parse NS from authority - no from child NS servers? I need check NS servers from about 30 000 domains with different TLDs.
I can use
dig google.cz +trace
But output is long and I don't ...
1
vote
1answer
2k views
How to enable dig to show status codes?
With default options dig shows the return status for a DNS query in the comment ;; ->>HEADER<<- ... status: NXDOMAIN:
ubuntu:~$ dig hosted-by.myinternetservices.com.
; <<>> ...
1
vote
1answer
462 views
Why can't 1.1.1.1 resolve a certain name (SERVFAIL)?
I've noticed that the cloudflare nameserver can't resolve certain DNS-names and replies with a SERVFAIL. However, when I run the dig command, I still get a reply. Why is that?
$ dig sdo.gsfc.nasa.gov ...
-1
votes
1answer
277 views
Official BIND9 Windows binaries - host.exe, dig.exe - don't do anything
I have downloaded the official BIND 9 Windows binaries from ISC. They don't do anything:
$ .\host.exe google.com
$ (no output)
Same with dig. How do I make host, dig etc work on Windows?
0
votes
0answers
75 views
Strange double answer cname in dig
I want to host a web site with github.io, using www.nv-gr.fr
I have put an A on @ and another on www
My zone is :
@ 10800 IN SOA ns1.gandi.net. hostmaster.gandi.net. 1531775542 10800 3600 604800 ...
0
votes
1answer
208 views
Can't update DiG utility on Debian 8 (Jessie)
I am trying to get the latest version of DiG DNS utility (part of BIND 9) but I can't seem to be able to.
I am running Debian 8 (Jessie).
The current DiG version :
root@myMachine:~# dig -v
DiG 9.9....
0
votes
1answer
47 views
Why is it unable to make query directly from the country level DNS?
I tried to make a DNS trace request (taking Oxford's website www.ox.ac.uk as an example) starting from Google's DNS 8.8.8.8. I can successfully get the result and the route was via the country level ...
0
votes
0answers
110 views
Why dig cannot get my DNS records immediately?
I'm working with a online development server and I need to change quite frequently the bind9 configuration, but I can't see the changes from my working computer.
What I'm doing is something like this ...
0
votes
1answer
1k views
How to resolve a list of hostnames to ip addresses while querying dig or using getent
I need to resolve all "A" records for a domain to ip addresses if they exist while creating a bash script.
I've looked to see if there was a dig command to retrieve all a records for a domain but ...
-1
votes
2answers
1k views
Dig DNS vs Whois
I have a client that has their name services done through some third part. The domain was registered through Godaddy (yet a different third party). The name service provider had their domain names ...
0
votes
2answers
831 views
dig and host command return different SOA
So I found another post saying that host and dig are essentially the same except host is a more user friendly. For the most part this seems to be true however I came across this when trying to find ...
