BDKR28
Path:
HOME
/
bin
/
Editing: dig
{global-d-opt} host [@local-server] {local-d-opt} [ host [@local-server] {local-d-opt} [...]] Use "dig -h" (or "dig -h | more") for complete list of options ;; XFR size: %u records (messages %u, bytes %lu) ;; WARNING -- Some TSIG could not be validated ;; WARNING -- TSIG key was not used. ;; Received %lu bytes from %s(%s) in %ld us ;; Received %lu bytes from %s(%s) in %ld ms %s; <<>> DiG 9.11.36-RedHat-9.11.36-16.el8_10.8 <<>> Where: domain is in the Domain Name System q-class is one of (in,hs,ch,...) [default: in] q-type is one of (a,any,mx,ns,soa,hinfo,axfr,txt,...) [default:a] (Use ixfr=version for type ixfr) q-opt is one of: -4 (use IPv4 query transport only) -6 (use IPv6 query transport only) -b address[#port] (bind to source address/port) -c class (specify query class) -f filename (batch mode) -i (use IP6.INT for IPv6 reverse lookups) -k keyfile (specify tsig key file) -m (enable memory usage debugging) -p port (specify port number) -q name (specify query name) -r (do not read ~/.digrc) -t type (specify query type) -u (display times in usec instead of msec) -x dot-notation (shortcut for reverse lookups) -y [hmac:]name:key (specify named base64 tsig key) d-opt is of the form +keyword[=value], where keyword is: +[no]aaflag (Set AA flag in query (+[no]aaflag)) +[no]aaonly (Set AA flag in query (+[no]aaflag)) +[no]additional (Control display of additional section) +[no]adflag (Set AD flag in query (default on)) +[no]all (Set or clear all display flags) +[no]answer (Control display of answer section) +[no]authority (Control display of authority section) +[no]badcookie (Retry BADCOOKIE responses) +[no]besteffort (Try to parse even illegal messages) +bufsize[=###] (Set EDNS0 Max UDP packet size) +[no]cdflag (Set checking disabled flag in query) +[no]class (Control display of class in records) +[no]cmd (Control display of command line - global option) +[no]comments (Control display of packet header and section name comments) +[no]cookie (Add a COOKIE option to the request) +[no]crypto (Control display of cryptographic fields in records) +[no]defname (Use search list (+[no]search)) +[no]dnssec (Request DNSSEC records) +domain=### (Set default domainname) +[no]dscp[=###] (Set the DSCP value to ### [0..63]) +[no]edns[=###] (Set EDNS version) [0] +ednsflags=### (Set EDNS flag bits) +[no]ednsnegotiation (Set EDNS version negotiation) +ednsopt=###[:value] (Send specified EDNS option) +noednsopt (Clear list of +ednsopt options) +[no]expire (Request time to expire) +[no]fail (Don't try next server on SERVFAIL) +[no]header-only (Send query without a question section) +[no]identify (ID responders in short answers) +[no]ignore (Don't revert to TCP for TC responses.) +[no]keepopen (Keep the TCP socket open between queries) +[no]mapped (Allow mapped IPv4 over IPv6) +[no]multiline (Print records in an expanded format) +ndots=### (Set search NDOTS value) +[no]nsid (Request Name Server ID) +[no]nssearch (Search all authoritative nameservers) +[no]onesoa (AXFR prints only one soa record) +[no]opcode=### (Set the opcode of the request) +[no]qr (Print question before sending) +[no]question (Control display of question section) +[no]rdflag (Recursive mode (+[no]recurse)) +[no]recurse (Recursive mode (+[no]rdflag)) +retry=### (Set number of UDP retries) [2] +[no]rrcomments (Control display of per-record comments) +[no]search (Set whether to use searchlist) +[no]short (Display nothing except short form of answers - global option) +[no]showsearch (Search with intermediate results) +[no]sigchase (Chase DNSSEC signatures) +[no]split=## (Split hex/base64 fields into chunks) +[no]stats (Control display of statistics) +subnet=addr (Set edns-client-subnet option) +[no]tcp (TCP mode (+[no]vc)) +timeout=### (Set query timeout) [5] +[no]topdown (Do +sigchase in top-down mode) +[no]trace (Trace delegation down from root [+dnssec]) +trusted-key=#### (Trusted Key to use with +sigchase) +tries=### (Set number of UDP attempts) [3] +[no]ttlid (Control display of ttls in records) +[no]ttlunits (Display TTLs in human-readable units) +[no]unknownformat (Print RDATA in RFC 3597 "unknown" format) +[no]vc (TCP mode (+[no]tcp)) +[no]zflag (Set Z flag in query) global d-opts and servers (before host name) affect all queries. local d-opts and servers (after host name) affect only that lookup. -h (print help and exit) -v (print version and exit) DiG 9.11.36-RedHat-9.11.36-16.el8_10.8 ;; Warning, extra class option ;; Warning, ignoring invalid class %s ;; Warning, extra type option ;; Warning, ignoring invalid type %s couldn't get address for '%s': %s: skipping lookup (lookup_list).tail == (lookup) (lookup_list).head == (lookup) (lookup_list).head != (lookup) (lookup_list).tail != (lookup) ednsopt no code point specified ;; Warning, split must be a multiple of 4; adjusting to %u ;; Warning, ixfr requires a serial number couldn't open specified batch file ;; WARNING: .local is reserved for Multicast DNS ;; You are currently testing what happens when an mDNS query is leaked to DNS ;; ->>HEADER<<- opcode: %s, status: %s, id: %u ; QUERY: %u, ANSWER: %u, AUTHORITY: %u, ADDITIONAL: %u ;; WARNING: recursion requested but not available ;; WARNING: EDNS query returned status %s - retry with '%s+noedns' ;; WARNING: Message has %u extra byte%s at end dns_message_pseudosectiontotext isc_buffer_reserve(&_tmp, _length) == ISC_R_SUCCESS isc_buffer_availablelength(buf) >= _length ;; Query time: %ld usec ;; Query time: %ld msec ;; SERVER: %s(%s) %a %b %d %H:%M:%S %Z %Y ;; WHEN: %s ;; MSG SIZE rcvd: %u dns_master_stylecreate +cmd +short ; (%d server%s found) ;; global options:%s%s can't find IPv4 networking can't find IPv6 networking 46bcdfhikmnpqrtvyx digrc (late) 46dhimnruv Couldn't parse port number invalid address %s looking up %s ixfr= Couldn't parse serial number Invalid IP address %s Invalid option: -%s parse_args() making new lookup batchfp == ((void *)0) ../../../bin/dig/dig.c HOME digrc (open) %s/.digrc config line %s .digrc argv %d: %s main parsing %s no valid addresses for '%s' ;; Invalid option %s no aaonly aaflag additional adflag all authority badcookie besteffort bufsize Couldn't parse buffer size cdflag cl class COOKIE data too large crypto defname dnssec domain dscp DSCP Couldn't parse DSCP value Couldn't parse edns Couldn't parse ednsflags ednsnegotiation ednsopt expire fail header-only identify idnin idnout ignore keepopen mapped multiline Couldn't parse ndots nsid nssearch onesoa Couldn't parse opcode question rdflag recurse retry Couldn't parse retries rrcomments showsearch sigchase Couldn't parse split stats subnet Couldn't parse client tcp Couldn't parse timeout topdown trace Couldn't parse tries trusted-key trusted key too large ttl ttlid ttlunits unknownformat vc zflag Invalid option: +%s batch line %s batch argv %d: %s result == 0 0123456789 short_form long_form nocomments +nodnssec isc_buffer_allocate ; %s sap != ((void *)0) && *sap == ((void *)0) invalid prefix length in '%s': %s ;; Warning, ignoring invalid TSIG algorithm %s key must have algorithm and secret ;; Couldn't create key %s: bad algorithm Couldn't read key from %s: %s unable to generate cookie secret can't find either v4 or v6 networking freeing server %p belonging to %p (lookup->my_server_list).tail == ((dig_server_t *)ptr) (lookup->my_server_list).head == ((dig_server_t *)ptr) (lookup->my_server_list).head != ((dig_server_t *)ptr) (lookup->my_server_list).tail != ((dig_server_t *)ptr) convert textname to IDN encoding convert origin to IDN encoding '%s' is not in legal name syntax (%s) dns_name_isabsolute(lookup->name) starting to render the message isc_buffer_availablelength(&b) >= (unsigned int) (unsigned)addrl i + lookup->ednsoptscnt <= (100U + 5) create query %p linked to lookup %p couldn't get address for '%s': %s (lookup->my_server_list).tail == (srv) (lookup->my_server_list).head == (srv) (lookup->my_server_list).head != (srv) (lookup->my_server_list).tail != (srv) canceling pending query %p, belonging to %p canceling connecting query %p, belonging to %p Error in the queried type: %d Launch a query to find a RRset of type (lookup_list).tail == (current_lookup) (lookup_list).head != (current_lookup) (lookup_list).tail != (current_lookup) ;; No trusted key, +sigchase option is disabled isn't a subdomain of any Trusted Keys: +sigchase option is disable ignoring launch_next_query because !pending isc_buffer_reserve(&_tmp, 2) == ISC_R_SUCCESS isc_buffer_availablelength(&query->slbuf) >= 2U sending a request in launch_next_query isc_time_now((&query->time_sent)) == 0 ;; Skipping mapped address '%s' event->ev_type == (((2) << 16) + 4) ;; Connection to %s(%s) for %s failed: %s. event->ev_type == (((2) << 16) + 1) (sevent->bufferlist).tail == (b) (sevent->bufferlist).head == (b) (sevent->bufferlist).head != (b) (sevent->bufferlist).tail != (b) ;; communications error to %s: %s ((query->recvlist).head == ((void *)0)) recving with lookup=%p, query=%p resubmitted recv request with length %d, recvcount=%d working on lookup %p, query %p recving with lookup=%p, query=%p, sock=%p event->ev_type == (((1) << 16) + 2) resending UDP request to first server making new TCP request, %d tries left ;; connection timed out; no servers could be reached event->ev_type == (((2) << 16) + 2) ((lookup_list).head) == ((void *)0) ((pthread_mutex_destroy(((&lookup_lock))) == 0) ? 0 : 34) == 0 Destroy the messages kept for sigchase rdata.type == ((dns_rdatatype_t)dns_rdatatype_dnskey) ;; Ok, find a Trusted Key in the DNSKEY RRset: %d keyrdata.type == ((dns_rdatatype_t)dns_rdatatype_dnskey) Oops: impossible to build new DS rdata ;; OK a DS valids a DNSKEY in the RRset ;; Now verify that this DNSKEY validates the DNSKEY RRset ;; This DS is NOT the DS for the chasing KEY: FAILED Launch a query to find a RRset of type ;; NS RRset is missing to continue validation: FAILED chase_nsrdataset != ((void *)0) ;; No Answers: Validation FAILED ;; RRSIG is missing for continue validation: FAILED ;; RRSIG of the RRset to chase: chase_sigrdataset != ((void *)0) ;; DNSKEY is missing to continue validation: FAILED ;; DNSKEYset that signs the RRset to chase: chase_keyrdataset != ((void *)0) ;; RRSIG for DNSKEY is missing to continue validation : FAILED ;; RRSIG of the DNSKEYset that signs the RRset to chase: chase_sigkeyrdataset != ((void *)0) ;; WARNING There is no DS for the zone: ;; WARNING : NO RRSIG DS : RRSIG DS should come with DS ;; RRSIG of the DSset of the DNSKEYset ;; nothing in authority section : impossible to validate the non-existence : FAILED There is a NSEC for this zone in the AUTHORITY section: ;; no RRSIG NSEC in authority section: impossible to validate the non-existence: FAILED OK the NSEC said that the type doesn't exist There isn't RRSIG NSEC for the zone We want to prove the non-existence of a type of rdata %d or of the zone: We have a NSEC for this zone :OK prove_nx: OK type does not exist there is no NSEC for this zone: validating that the zone doesn't exist no answer or authority section no response but there is a delegation in authority section: no response and no delegation in authority section but a reference to: ;; RRSIG of DNSKEY is missing to continue validation: FAILED chase_dsrdataset != ((void *)0) chase_sigdsrdataset != ((void *)0) ;; chain of trust can't be validated: FAILED ;; RRset is missing to continue validation SHOULD NOT APPEND: FAILED ;; RRSIG is missing to continue validation SHOULD NOT APPEND: FAILED ;; We are in a Grand Father Problem: See 2.2.1 in RFC 3658 ;; and we try to continue chain of trust validation of the zone: ;;NSset is missing to continue validation: FAILED ;; DSset is missing to continue validation: FAILED ;; Impossible to verify the DSset: FAILED ;; Impossible to verify the non-existence, the NSEC RRset can't be validated: FAILED ;; Impossible to verify the NSEC RR to prove the non-existence : FAILED ;; Impossible to verify the non-existence: FAILED ;; OK the query doesn't have response but we have validate this fact : SUCCESS ;; RRsig of RRset is missing to continue validation SHOULD NOT APPEND: FAILED ;; Impossible to verify the RRset : FAILED ;; FINISH : we have validate the DNSSEC chain of trust: SUCCESS ;; Impossible to verify the Non-existence, the NSEC RRset can't be validated: FAILED No Answers and impossible to prove the unsecurity : Validation FAILED ;; An NSEC prove the non-existence of a answers, Now we want validate this NSEC ;; WE HAVE MATERIAL, WE NOW DO VALIDATION ;; No DNSKEY is valid to check the RRSIG of the RRset: FAILED ;; OK We found DNSKEY (or more) to validate the RRset ;; Ok this DNSKEY is a Trusted Key, DNSSEC validation is ok: SUCCESS ;; Now, we are going to validate this DNSKEY by the DS ;; the DNSKEY isn't trusted-key and there isn't DS to validate the DNSKEY: FAILED ;; ERROR no DS validates a DNSKEY in the DNSKEY RRset: FAILED ;; OK this DNSKEY (validated by the DS) validates the RRset of the DNSKEYs, thus the DNSKEY validates the RRset ;; Now, we want to validate the DS : recursive call isc_time_now((&query->time_recv)) == 0 (sevent->bufferlist).tail == (&query->recvbuf) (sevent->bufferlist).head == (&query->recvbuf) (sevent->bufferlist).head != (&query->recvbuf) (sevent->bufferlist).tail != (&query->recvbuf) ;; reply from unexpected source: %s, expected %s ;; %s: ID mismatch: expected ID %u, got %u ;; ERROR: short (< header size) message ;; Warning: ID mismatch: expected ID %u, got %u ;; Warning: short (< header size) message received ;; Warning: query response not set ;; Warning: Message parser reports malformed message packet. ;; Warning: Opcode mismatch: expected %s, got %s ;; Question section mismatch: got %s/%s/%s ;; BADVERS, retrying with EDNS version %u. ;; Truncated, retrying in TCP mode. ;; Got %s from %s, trying next server ;; Couldn't verify signature: %s ;; expected opt record in response Memory allocation failure in %s:%d ; Transfer failed. Didn't start with SOA answer. ../../../bin/dig/dighost.c invalid %s '%s': %s %s: out of memory isc_time_now((&t)) == 0 %u.%06u: query != ((void *)0) clear_query(%p) send_done not yet called (lookup->q).tail == (query) (lookup->q).head == (query) (lookup->q).head != (query) (lookup->q).tail != (query) sockcount=%d empty full check_if_done() list %s sockcount == 0 recvcount == 0 shutting down cancel_lookup() force_timeout () isc_event_allocate: %s from string is too long ACE string is too long %s: %s isc_hex_decodestring isc_hex_totext bringup_timer() have local timeout of %d isc_timer_create servname != ((void *)0) make_server(%s) copy_server_list() %%%u flush_server_list() (server_list).tail == (ps) (server_list).head == (ps) (server_list).head != (ps) (server_list).tail != (ps) memory allocation failure clone_server_list() make_empty_lookup() !free_now IDN_DISABLE ASCII CHARSET clone_lookup() looknew != ((void *)0) requeue_lookup() too many lookups next_origin() following up %s setup_text_key() dns_name_init couldn't parse digest bits invalid prefix '%s' .0 invalid address '%s' hmac != ((void *)0) unknown key type '%.*s' hmac-md5 hmac-md5- digest-bits [0..128] hmac-sha1 hmac-sha1- digest-bits [0..160] hmac-sha224 hmac-sha224- digest-bits [0..224] hmac-sha256 hmac-sha256- digest-bits [0..256] hmac-sha384 hmac-sha384- digest-bits [0..384] hmac-sha512 hmac-sha512- digest-bits [0..512] setup_file_key() secret algorithm setup_system() lwres_context_create failed /etc/resolv.conf parse of %s failed create_search_list() verbose is on ndots is %d. tries is %d. timeout is %d. 127.0.0.1 add_nameserver failed ::1 dns_name_settotextfilter setup_libs() isc_mem_create dig isc_log_create default_debug isc_log_usechannel isc_taskmgr_create isc_task_create isc_timermgr_create isc_socketmgr_create isc_entropy_create dst_lib_init isc_mempool_create COMMPOOL isc_mutex_init too many ednsopts bad edns code point: %s destroy freeing buffer %p lookup != ((void *)0) try_clear_lookup(%p) query to %s still pending query to %s still connecting setup_lookup(%p) dns_message_create resetting lookup counter. cloning server list dns_message_gettempname idn_textname: %s trying origin %s trying idn origin %s using root origin '%s' is not a legal name (%s) recursive query AA query AD query CD query Z query add_question() dns_message_gettemprdataset() insert_soa() dns_message_gettemprdata isc_rdata_fromstruct dns_message_gettemprdatalist dns_message_gettemprdataset initializing keys dns_message_settsigkey dns_compress_init dns_message_renderbegin plen == 0 plen <= 32 plen <= 128 add_opt() dns_message_buildopt dns_message_setopt dns_message_rendersection dns_message_renderend done rendering ;; QUERY SIZE: %u count == 1 found NS set ;; BAD (HORIZONTAL) REFERRAL ;; BAD REFERRAL dns_rdata_tostruct found NS %s adding server %s i > 0 cancel_all() isc_mutex_lock success unlock_lookup %s:%d isc_mutex_unlock (lookup_list).tail == (l) (lookup_list).head == (l) (lookup_list).head != (l) (lookup_list).tail != (l) print_type empty rdataset sigrdata tostruct siginfo dns_name_totext for zone: %s /etc/trusted-key.key ./trusted-key.key ;; ERROR : is not a subdomain of: FAILED empty RRSIG dataset str != ((void *)0) nameFromString start_lookup() current_lookup == ((void *)0) ;; The queried zone: check_next_lookup(%p) still have a worker launch_next_query() sockcount >= 0 isc_socket_recvv recvcount=%d isc_socket_sendv sendcount=%d send_tcp_connect(%p) ;; No acceptable nameservers query->sock == ((void *)0) isc_socket_create isc_socket_bind isc_socket_connect sending next, since searching (l->q).tail == (query) (l->q).head == (query) (l->q).head != (query) (l->q).tail != (query) connect_done() query->waiting_connect in cancel handler sockcount > 0 unsuccessful connection: %s tcp_length_done() recvcount >= 0 b == &query->lengthbuf send_udp(%p) sending a request query->sock != ((void *)0) isc_socket_sendtov do_lookup() connect_timeout() trying next server... send_done() sendcount >= 0 destroy_libs() freeing task freeing taskmgr sendcount == 0 freeing commctx freeing socketmgr freeing timermgr freeing key %p destroy DST lib detach from entropy chase_msg->msg != ((void *)0) Removing log context Destroy memory dns_name_dup empty DS dataset ;; VERIFYING RRset for with DNSKEY:%d: %s dns_dnssec_keyfromrdata empty DNSKEY dataset empty DSset dataset dns_rdata_tostruct for DS empty KEY dataset ns name: %s for zone: %s with nameservers: ;; NO ANSWERS: %s ;; RRset to chase: chase_rdataset != ((void *)0) ;; DSset of the DNSKEYset dns_rdataset_first prove_nx: ERROR type exist dns_rcode_totext failed error response code %.*s ;; DNSKEYset: ;; RRSIG of the DNSKEYset: ;; DSset: ;; RRSIGset of DSset ;; cleanandgo ;; The Answer: No trusted keys present ERROR WARNING in TCP mode SERVFAIL reply recursion not available recv_done() lookup=%p, query=%p b == &query->recvbuf no longer pending. Got %s in recv cancel handler ;; communications error: %s getting initial querysig dns_message_getquerytsig dns_message_setquerytsig before parse starts ;; Got bad packet: %s %u bytes %02x dns_opcode_totext ;; BADCOOKIE, retrying%s. sending query %p 0A(A BBBB QXM`PhBpIPS 8A0A(B BBBH f (A ABBE h G J AAG L (D ABBD ~ (D ABBA ( p CBJ y K M C O O A O A (D ABBH a CABJ q
Save (System Override)
Cancel
Terminal
CWD: //bin
Execute