Questions tagged [dig]
dig is a command-line client to make queries against DNS servers, the Internet name servers.
18
questions
34
votes
3
answers
23k
views
Is dig +trace always accurate?
When the accuracy of a DNS cache is in question, dig +trace tends to be the recommended way of determining the authoritative answer for an internet facing DNS record. This seems to be particularly ...
- 33.1k
270
votes
12
answers
625k
views
List all DNS records in a domain using dig?
My company runs an internal DNS for mycompany.example
There is a machine on the network that I need to find, but I’ve forgotten its name. If I could see a list, it would probably jog my memory.
...
- 3,275
169
votes
5
answers
233k
views
Force dig to resolve without using cache
I'm wondering if there is a way to query a DNS server and bypass caching (with dig). Often I change a zone on the DNS server and I want to check if it resolves correctly from my workstation. But since ...
- 3,157
25
votes
2
answers
23k
views
SOA and Primary NS record (DNS)
The brunt of the question is this -- What is the relationship between the primary nameserver specified in the SOA record and the nameservers specified in the NS records. How are these things linked?
...
- 490
2
votes
1
answer
2k
views
DNS resolve timeout on RHEL 6.3 behind firewall
I have a server running Red Hat 6.3 Enterprise inside a VMWare virtual machine. There's a Juniper SSG 5 firewall sitting between the server and the Internet. I'm trying to diagnose what it looks like ...
- 253
128
votes
4
answers
213k
views
How can I see Time-To-Live (TTL) for a DNS record?
I would like to see the Time-To-Live (TTL) value for a CNAME record.
I have access to dig (on Apple Mac OS X), which gives me an answer like this:
% dig host.example.gov
<*SNIP*>
;; ANSWER ...
- 24k
87
votes
4
answers
97k
views
dig show only answer
I want dig only to show the answer of my query.
Normally, it prints out alot of additional info like this:
;; <<>> DiG 9.7.3 <<>> google.de
;; global options: +cmd
;; Got ...
- 4,253
3
votes
1
answer
1k
views
Why does TTL sometimes re-increment between DNS queries?
I dig xkcd.com, and I get something like this back:
; <<>> DiG 9.9.5-3ubuntu0.1-Ubuntu <<>> xkcd.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: ...
- 1,293
0
votes
2
answers
3k
views
Dig -x equivalent for AWS Route 53
I have an IP number associated with an AWS Elastic IP (EIP). I'd like to know, what DNS records in my Route 53 domain are associated with that A record's IP.
In a traditional DNS service, I would ...
- 25.9k
13
votes
3
answers
51k
views
How to find what Authoritative Name Server provided the answer using dig?
I need to check the differences in records on master and slave when making changes.
Is there some option for dig to show which Authoritative Name Server provided the answer?
for example
dig example....
- 328
6
votes
4
answers
14k
views
DNS Subdomain delegation issue
(Updated the post with more detailed example)
I have my domain: example.com setup at DNS provider 1. Provider 1 has nameservers:
ns1.dns1.com
ns2.dns1.com
I want to delegate authority for subdomain....
- 63
6
votes
2
answers
7k
views
Why is nslookup and dig giving me a "Warning: ID mismatch ... got 0" error?
I'm trying to troubleshoot some persistent connectivity issues and I'm frequently getting the following error message when using dig or nslookup.
bash$ nslookup
> www.google.com
;; Warning: ID ...
- 163
4
votes
1
answer
11k
views
BIND/DNS - dig +trace = Bad Referral and Bad Horizontal Referral
I have an interesting problem. I started noticing that when I do a dig +trace against one of the domains we are authoritative for, we get errors from our nameservers for "Bad Referral" and you can see ...
- 649
3
votes
2
answers
10k
views
Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?
I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
- 53
1
vote
2
answers
14k
views
Why don't DNS root servers answer?
If I try to query a root server with dig, I never receive an answer.
For example the output for dig @b.root-servers.net www.ubuntu.com is
; <<>> DiG 9.8.1-P1 <<>> @b.root-servers.net ...
- 239
1
vote
3
answers
887
views
What is the best way to get PRECISE domain name from ip address logged in iptables log
In iptables I am logging certain public IP addresses... say of websites visited from different workstations, depending on destination port number... All this is not really relevant to the question but ...
- 381
0
votes
2
answers
3k
views
Dig vs Whois on Nameserver Update and Reference to Unknown FQDN?
After running a dig on an old domain name moved from an old server to a new one, completely different IP and provider, I ran a dig and found that the listed nameserver does not match the one in the ...
- 519
0
votes
1
answer
3k
views
Reverse PTR record lookup not working with dig
As mentioned here, having a Reverse PTR record is key for successful email sending and delivery from one's own server. In order to check if it's correctly set for my server, I tried:
dig -x 111.111....
- 739