People who code: we want your input. Take the Survey

Questions tagged [dig]

dig is a command-line client to make queries against DNS servers, the Internet name servers.

Filter by
Sorted by
Tagged with
0
votes
1answer
76 views

Listing all the IPs of a given domain name with dig

I wanted to check what's the full list of IPs of a given website (for instance, google.ch). Running dig consistently returns me the same IP: dig google.ch google.ch. 136 IN A ...
1
vote
1answer
29 views

What is the difference between dig +tries=x and dig +retries=x?

I have been looking at the dig documentation and don't understand the difference between dig +tries=x and dig +retries=x. Can someone explain please?
0
votes
0answers
54 views

Dnsperf dns caching

i installed dnsperf with unbound and i'm looking to cache a list of DNS records on my centos server i use dnsperf to cache a list dns [root@mail bin]# cat domains.txt facebook.com. MX google.com. MX ...
0
votes
0answers
53 views

dig does not show the content of DS, DNSKEY or any DNSSEC related record, SERVFAIL

I want to see the content of records using dig but any RR related to DNSSEC comes up empty. This happens on two laptops of mine. I'm running Ubuntu 18.04. Is there any setting I can fix to stop ...
0
votes
2answers
45 views

dig all txt records

When I run the dig command, I only get one txt record: adriano@vm ~ dig swisspass.ch txt  ✔  4501  14:25:36 ; <&...
0
votes
0answers
57 views

Is there a limit on length of CNAME chain in getaddrinfo lookup?

Update 1 I changed the nameserver in /etc/resolv.conf and that fixes the problem, but it will cause issues with internal name resolutions. So what does it mean? dig querying the same NS gets all 7 ...
1
vote
1answer
87 views

Migrating domain from AWS Route S3 to Linode

I want to migrate 1 domain from AWS Route S3 to Linode; I've changed the NS recods to point to ns1.linode.com ns2.linode.com ns3.linode.com ns4.linode.com ns5.linode.com but on the DNS checket it ...
0
votes
1answer
118 views

Dig +trace doesn't display the whole delegation chain

When I trace the DNS lookup of google.com for example, dig displays only the request to the root server and then goes straight to the 2nd level domain servers, skipping the top level domain. In other ...
5
votes
1answer
2k views

Why do dig, host and nslookup return different results?

It seems my default (router) DNS server returns different results depending on the tool used to query it. Using dig: $ dig @192.168.1.2 test.example.com ; <<>> DiG 9.16.8-Debian <<&...
0
votes
2answers
34 views

Site not resolving uniformly

My site www.acurent.com is not resolving to its IP address 23.20.46.124 uniformly Check on: https://www.whatsmydns.net/#A/acurent.com, it shows that its resolving for certain networks only. If you ...
0
votes
1answer
68 views

Understanding TTL values in DNS query answers using dig

I'm querying google.com with dig and I'm having a hard time understanding why TTL values sometimes jump around instead of decrementing every second uniformly (which is my expectation). What am I ...
0
votes
0answers
92 views

How to lookup DNS Record in specific zone

For example I have a zone example.com and someone created a dotted hostname app.subzone which resolves to app.subzone.example.com in it. Now I create a new zone subzone.example.com and an record appin ...
-2
votes
1answer
202 views

dig shows SERVFAIL , while pointing at nameserver works fine

somewhat similar to this thread, I faced with a problem where dig blah.net (for the sake of simplicity let's call it blah.net) returns status: SERVFAIL This DNS zone is hosted on route53, and I use ...
0
votes
1answer
131 views

avahi-resolve resolves hostname that dig -p 5353 @224.0.0.251 does not?

I thought avahi-resolve and dig -p 5353 @224.0.0.251 did much the same thing. However, I have a device where I can resolve its name using avahi-resolve but not using dig: $ avahi-resolve --name ding-...
0
votes
1answer
1k views

What does OPT PSEUDOSECTION mean in `dig` response?

This is part of the response when I run dig in terminal: ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 What does OPT mean? What does PSEUDOSECTION mean?
0
votes
1answer
88 views

Command line dig tool doesn't get answer for SOA query, while https://toolbox.googleapps.com/apps/dig/#SOA/ DOES

While running in my windows 10 64bits machine this command: dig gmail-smtp-in.l.google.com ANY I get this response ; <<>> DiG 9.16.2 <<>> gmail-smtp-in.l.google.com ANY ;; ...
-1
votes
2answers
522 views

Setting up my own nameserver on Freedom domain

I need to configure a DNS on a new domain registered on freenom.com as follows Domain: mydomain.ga My Server IP: 1.2.3.4 My need is to ask mydomain.ga (1.2.3.4) for a specific subdomain (for ...
1
vote
1answer
276 views

Are horizontal referrals in DNS allowed?

I've been looking into DNS quite a bit lately and currently got the following error message with the DIG command: BAD (HORIZONTAL) REFERRAL From my understanding, this is caused due to delegating a ...
0
votes
1answer
85 views

Rate-limiting of dig [closed]

I have a PHP script that calls the bash dig command through the exec function on Ubuntu to monitor hundreds of domains. What the script does is to call dig to fetch some DNS records on each domain ...
0
votes
1answer
133 views

ping resolves hostname but dig does not [closed]

I'm attempting to set up FreeIPA on a Centos KVM guest and one of the prerequisites is to make sure static hostname is set and that the hostname resolves to guest's IP address. My /etc/hosts file is ...
0
votes
1answer
945 views

SRV Record not working GoDaddy HTTPS on separate port

I'm having trouble setting up an office with one public IP and multiple web services running on separate ports. One of the services is a media server and I'm trying to add an SRV record to godaddy in ...
-2
votes
1answer
266 views

Intermittent DNS failures [closed]

We have intermittent DNS failures. Upon troubleshooting we found from our server, (where the domain is pointed to) gives connection timeout when queried against few TLD ns. Ex: dig domain @tldns (...
0
votes
1answer
231 views

How to verify which DNS server actually answered a request when it's forwarded?

ISC BIND has a tool named dig that allows us to send a DNS request to a DNS server set on parameter and see what that server answers. I wanted to know if that DNS server answered based on its cache, ...
0
votes
1answer
103 views

Different IP for same FQDN using different resolver

For my domain gobudgie.ml I get different IPs on different DNS resolver eg.: jasmich.ml@8.8.4.4 (Default): jasmich.ml. 964 IN A 31.17.211.88 jasmich.ml@1.1.1.1 (CloudFlare): jasmich.ml. ...
0
votes
1answer
45 views

Unable to make NS queries against bind with catchall configuration

I've configured bind to catch all domains and return the same ip (A record) for them. This is for a domain parking service where there might be thousands of domains involved. After pointing the ...
0
votes
1answer
27 views

Nameserver response has no authoritative bit set

I know that the authoritative name servers for google.com are ns1-4.google.com. Now, I do this: dig google.com @ns1.google.com And the response is: ; <<>> DiG 9.11.3-1ubuntu1.8-Ubuntu &...
-2
votes
2answers
806 views

Can I get all the virtual IP addresses given the CNAME

Is there a way to find all the aliases of the host? $ nslookup x x is an alias for y y is an alias for z z has address 192.0.2.45 So if I have z, is there a way of using nslookup/host/dig commands ...
2
votes
1answer
330 views

Windows dig shows no answer section

I downloaded BIND from https://www.isc.org/download/ and installed it following https://nil.uniza.sk/how-install-dig-dns-tool-windows-7. When I run dig it does not show any answer section. For example:...
0
votes
0answers
115 views

dns NXDOMAIN error with external view

we are trying to configure a bind9 server. We have two different views, one for the internal zone (dmz) and another for external users who want to access to the dmz web. The problem is that we may be ...
9
votes
2answers
9k views

How do I ask “dig” to only return the IP from a CNAME record?

The dig +short command (such as described in "dig show only answer") is great for batch processing names into IP addresses. It does a simple job and does it well. Unfortunately when there's a CNAME ...
2
votes
1answer
6k views

dig output missing answer section

I recently got a new domain (lets call it testdomain.extample) from Route53 on Amazon. I further have a classic load balancer from AWS that I want requests to be forwarded to when somebody visits www....
0
votes
1answer
401 views

Why does ping to FQDN fails, but dig succeed?

When I try to ping a certain FQDN, I fail: $ ping test-customer-1.clients.jsonar.com ping: test-customer-1.clients.jsonar.com: Name or service not known However, dig et al. succeeds: $ dig test-...
0
votes
0answers
3k views

Dig +trace not working, while +notrace works

I am trying to troubleshoot some DNS issues and I am starting by trying to trace my DNS lookups using dig +trace. Im getting some weird results. If do a normal dig to my unbound resolver. dig @192....
0
votes
2answers
128 views

Scrape subdomain IPs using PTR records

I'm looking for a solution to an obscure problem. For security policy reasons we have a workstation using PeerBlock with a block list that essentially blacklists the entire internet, and then an allow ...
0
votes
1answer
3k views

DIG: always get a status: FORMERR

I'm under ubuntu 18.04, having DNS issues, so I am using dig command to debug my DNS. Thing is when I dig a site like redhat.com, or a well configured DNS of mine, I always get a FORMERR status, and ...
1
vote
0answers
220 views

Is there a way to force dig to query an authoritative server?

I often find myself doing: dig www.example.com @$(dig NS example.com +short | head -n 1) It's a bit like doing a dig +trace www.example.com but starting from the NS of example.com instead of ...
1
vote
0answers
2k views

Why is ADDITIONAL SECTION missing from my dig response?

I have a couple bind servers recently upgraded to Ubuntu 16.04 (from 14.04). Cron runs dig . ns once a day to grab an updated list of Root servers used in the bind configuration. The script run by ...
1
vote
1answer
51 views

Why does my website's locally retrieved name server appear different from one retrieved online?

My website is not resolving correctly, so I checked the name server via nslookup in PowerShell and see bodis.com. Then I checked online, hoping I checked the same name server, and see domaincontrol....
0
votes
1answer
79 views

DNS server with bind in Debian 9

I have a project to do for college. The project is a DNS server with client. I created the DNS server but when I want to see how it works I use the command dig myservername. How can I proceed to see ...
0
votes
2answers
361 views

dig - how return NS from authority only

How I can parse NS from authority - no from child NS servers? I need check NS servers from about 30 000 domains with different TLDs. I can use dig google.cz +trace But output is long and I don't ...
1
vote
1answer
2k views

How to enable dig to show status codes?

With default options dig shows the return status for a DNS query in the comment ;; ->>HEADER<<- ... status: NXDOMAIN: ubuntu:~$ dig hosted-by.myinternetservices.com. ; <<>> ...
1
vote
1answer
462 views

Why can't 1.1.1.1 resolve a certain name (SERVFAIL)?

I've noticed that the cloudflare nameserver can't resolve certain DNS-names and replies with a SERVFAIL. However, when I run the dig command, I still get a reply. Why is that? $ dig sdo.gsfc.nasa.gov ...
-1
votes
1answer
277 views

Official BIND9 Windows binaries - host.exe, dig.exe - don't do anything

I have downloaded the official BIND 9 Windows binaries from ISC. They don't do anything: $ .\host.exe google.com $ (no output) Same with dig. How do I make host, dig etc work on Windows?
0
votes
0answers
75 views

Strange double answer cname in dig

I want to host a web site with github.io, using www.nv-gr.fr I have put an A on @ and another on www My zone is : @ 10800 IN SOA ns1.gandi.net. hostmaster.gandi.net. 1531775542 10800 3600 604800 ...
0
votes
1answer
208 views

Can't update DiG utility on Debian 8 (Jessie)

I am trying to get the latest version of DiG DNS utility (part of BIND 9) but I can't seem to be able to. I am running Debian 8 (Jessie). The current DiG version : root@myMachine:~# dig -v DiG 9.9....
0
votes
1answer
47 views

Why is it unable to make query directly from the country level DNS?

I tried to make a DNS trace request (taking Oxford's website www.ox.ac.uk as an example) starting from Google's DNS 8.8.8.8. I can successfully get the result and the route was via the country level ...
0
votes
0answers
110 views

Why dig cannot get my DNS records immediately?

I'm working with a online development server and I need to change quite frequently the bind9 configuration, but I can't see the changes from my working computer. What I'm doing is something like this ...
0
votes
1answer
1k views

How to resolve a list of hostnames to ip addresses while querying dig or using getent

I need to resolve all "A" records for a domain to ip addresses if they exist while creating a bash script. I've looked to see if there was a dig command to retrieve all a records for a domain but ...
-1
votes
2answers
1k views

Dig DNS vs Whois

I have a client that has their name services done through some third part. The domain was registered through Godaddy (yet a different third party). The name service provider had their domain names ...
0
votes
2answers
831 views

dig and host command return different SOA

So I found another post saying that host and dig are essentially the same except host is a more user friendly. For the most part this seems to be true however I came across this when trying to find ...