use dig query
Mark Andrews
marka at isc.org
Mon Oct 25 04:44:47 UTC 2021
Works fine for me.
% bin/dig/dig 1.1.1.1.in-addr.arpa +trace
; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace
;; global options: +cmd
. 331767 IN NS f.root-servers.net.
. 331767 IN NS j.root-servers.net.
. 331767 IN NS k.root-servers.net.
. 331767 IN NS l.root-servers.net.
. 331767 IN NS i.root-servers.net.
. 331767 IN NS e.root-servers.net.
. 331767 IN NS h.root-servers.net.
. 331767 IN NS b.root-servers.net.
. 331767 IN NS m.root-servers.net.
. 331767 IN NS g.root-servers.net.
. 331767 IN NS c.root-servers.net.
. 331767 IN NS d.root-servers.net.
. 331767 IN NS a.root-servers.net.
. 331767 IN RRSIG NS 8 0 518400 20211104170000 20211022160000 14748 . FERgiY720i+bYmHhXGQ2OU7NOoSM8Mhg/OedgoJrJ3Zs17/IJwUnEOkd EPq98F8ar7Epc9/H0p0ZxQflKrL40q/+6S/KLoR5ecoem7Vp3JN4HMI7 U7z9gobvmBS2f7vekrFp60AXtihCcAypaWRhyl2IZUK7u11tNbN95It+ D/7IZLa3mFrVgMmeNRdd4uoOWzHxBZ4OusHNlnJ/rvE2smIS9RwEUbDW iu9/psMZpfEBY5XOLg9ubKog/jma+T6OEINEdH0mzGtv4WoYAStd17Ax mKHsf1N9PW8rNW+c63Y36VQYXhF+ikhPG3i1Q/a9tJVbN31u5EUtz2yV eUklXw==
;; Received 1137 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms
in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa.
in-addr.arpa. 86400 IN DS 47054 8 2 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2
in-addr.arpa. 86400 IN DS 53696 8 2 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF
in-addr.arpa. 86400 IN DS 63982 8 2 AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73
in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 20211107000000 20211024230000 52399 arpa. cW2ERU/EJzAVftlJSuGmnhXMKaLWDpaP5ZKyw69/x0r5u7wSuksZ9Din Y/dQi2ggf31k4nFBjLuBPU/FVCqoCc2VmF8RW4L4hIvo1OkcH5j0qMBI UcnSU8XmRbp7zE0wZfzUaNVX0VHKYr6Z0dMWuhSeB7V4moJ3L6pz0Zj+ H6zdAaepqE0GRN/DhzuscMEL755BMypHSauBhIuf/J33p1dr4LRfe/mf 0J0SGB9Cxj555h504vXoCmwf96qwWNTyGzakwVTRVRvtMbIsg+8nJHJ4 pcPHq3kOtrTYdY38z4BtJV0klaJIL2JYNUqFQkOeZRWsNLymz6gnfnBb Pr2oVA==
;; Received 861 bytes from 2001:500:1::53#53(h.root-servers.net) in 308 ms
1.in-addr.arpa. 86400 IN NS ns2.apnic.net.
1.in-addr.arpa. 86400 IN NS ns3.lacnic.net.
1.in-addr.arpa. 86400 IN NS apnic.authdns.ripe.net.
1.in-addr.arpa. 86400 IN NS rirns.arin.net.
1.in-addr.arpa. 86400 IN NS apnic1.dnsnode.net.
1.in-addr.arpa. 86400 IN DS 23004 13 2 3582737862817D55F8F7473BC58E620CFD4A0E1EF88F05C42C963113 3E32E894
1.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 20211107150454 20211017145555 51651 in-addr.arpa. FwkrCN7wo52nR6w5E6oyxrxOYWW+gzGK2EaWf0UgCELSKuZLqNFqnlLY +NWtott7UzXJmSl1OxmO74o13+mKJcgbYaTdbCQCeGgda68hxooP+LQ3 AxEXnKYwyI803nOG9LVxIt03ln8S9r3bOje0i+AvZMjX5D+nO2fbW6K6 rVw=
;; Received 408 bytes from 2001:500:87::87#53(b.in-addr-servers.arpa) in 348 ms
1.1.1.in-addr.arpa. 86400 IN NS ns7.cloudflare.com.
1.1.1.in-addr.arpa. 86400 IN NS ns3.cloudflare.com.
99g3opuj99svu7j0634fc9ib4os7hqim.1.in-addr.arpa. 3600 IN NSEC3 1 0 5 70A93501FFC3E41D 99PTB70MBGKHRHBLB8TLUG7DII191IOA NS
99g3opuj99svu7j0634fc9ib4os7hqim.1.in-addr.arpa. 3600 IN RRSIG NSEC3 13 4 3600 20211105031842 20211021014842 2679 1.in-addr.arpa. PrGfRRQwXHSY237HPzTEAepc5ylC2v99BOEGlzfwIAN6lbYEapX2AoqL YzlBnk4PyfftZS+xURjjkS+kxzLWcA==
;; Received 333 bytes from 203.119.95.53#53(ns2.apnic.net) in 29 ms
1.1.1.in-addr.arpa. 3600 IN SOA alec.ns.cloudflare.com. dns.cloudflare.com. 2036583626 10000 2400 604800 3600
;; Received 111 bytes from 162.159.4.8#53(ns7.cloudflare.com) in 17 ms
% bin/dig/dig 1.1.1.1.in-addr.arpa +trace +nodnssec
; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace +nodnssec
;; global options: +cmd
. 331756 IN NS k.root-servers.net.
. 331756 IN NS i.root-servers.net.
. 331756 IN NS g.root-servers.net.
. 331756 IN NS j.root-servers.net.
. 331756 IN NS b.root-servers.net.
. 331756 IN NS c.root-servers.net.
. 331756 IN NS f.root-servers.net.
. 331756 IN NS d.root-servers.net.
. 331756 IN NS m.root-servers.net.
. 331756 IN NS e.root-servers.net.
. 331756 IN NS a.root-servers.net.
. 331756 IN NS l.root-servers.net.
. 331756 IN NS h.root-servers.net.
;; Received 851 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms
in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa.
;; Received 425 bytes from 192.5.5.241#53(f.root-servers.net) in 13 ms
1.in-addr.arpa. 86400 IN NS ns2.apnic.net.
1.in-addr.arpa. 86400 IN NS ns3.lacnic.net.
1.in-addr.arpa. 86400 IN NS apnic.authdns.ripe.net.
1.in-addr.arpa. 86400 IN NS rirns.arin.net.
1.in-addr.arpa. 86400 IN NS apnic1.dnsnode.net.
;; Received 188 bytes from 193.0.9.1#53(f.in-addr-servers.arpa) in 303 ms
1.1.1.in-addr.arpa. 86400 IN NS ns7.cloudflare.com.
1.1.1.in-addr.arpa. 86400 IN NS ns3.cloudflare.com.
;; Received 127 bytes from 2620:38:2000::53#53(rirns.arin.net) in 291 ms
1.1.1.in-addr.arpa. 3600 IN SOA alec.ns.cloudflare.com. dns.cloudflare.com. 2036583626 10000 2400 604800 3600
;; Received 111 bytes from 2400:cb00:2049:1::a29f:408#53(ns7.cloudflare.com) in 298 ms
%
If you add +qr +all you can see the outgoing queries don’t have DO set.
% bin/dig/dig 1.1.1.1.in-addr.arpa +trace +nodnssec +qr +all
; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace +nodnssec +qr +all
;; global options: +cmd
;; Sending:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44117
;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 5bf7fc1153027792
;; QUESTION SECTION:
;. IN NS
;; QUERY SIZE: 40
;; BADCOOKIE, retrying.
;; Sending:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6212
;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995
;; QUESTION SECTION:
;. IN NS
;; QUERY SIZE: 56
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6212
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995 (good)
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 331627 IN NS i.root-servers.net.
. 331627 IN NS l.root-servers.net.
. 331627 IN NS c.root-servers.net.
. 331627 IN NS k.root-servers.net.
. 331627 IN NS h.root-servers.net.
. 331627 IN NS d.root-servers.net.
. 331627 IN NS a.root-servers.net.
. 331627 IN NS m.root-servers.net.
. 331627 IN NS f.root-servers.net.
. 331627 IN NS b.root-servers.net.
. 331627 IN NS e.root-servers.net.
. 331627 IN NS j.root-servers.net.
. 331627 IN NS g.root-servers.net.
;; ADDITIONAL SECTION:
g.root-servers.net. 603919 IN A 192.112.36.4
k.root-servers.net. 603910 IN A 193.0.14.129
i.root-servers.net. 603922 IN A 192.36.148.17
m.root-servers.net. 603920 IN A 202.12.27.33
e.root-servers.net. 603909 IN A 192.203.230.10
b.root-servers.net. 603919 IN A 199.9.14.201
c.root-servers.net. 603920 IN A 192.33.4.12
f.root-servers.net. 603912 IN A 192.5.5.241
d.root-servers.net. 603922 IN A 199.7.91.13
h.root-servers.net. 603911 IN A 198.97.190.53
j.root-servers.net. 603910 IN A 192.58.128.30
a.root-servers.net. 603924 IN A 198.41.0.4
l.root-servers.net. 603925 IN A 199.7.83.42
g.root-servers.net. 603919 IN AAAA 2001:500:12::d0d
k.root-servers.net. 603910 IN AAAA 2001:7fd::1
i.root-servers.net. 603924 IN AAAA 2001:7fe::53
m.root-servers.net. 603920 IN AAAA 2001:dc3::35
e.root-servers.net. 603909 IN AAAA 2001:500:a8::e
b.root-servers.net. 603917 IN AAAA 2001:500:200::b
c.root-servers.net. 603919 IN AAAA 2001:500:2::c
f.root-servers.net. 603912 IN AAAA 2001:500:2f::f
d.root-servers.net. 603922 IN AAAA 2001:500:2d::d
h.root-servers.net. 603911 IN AAAA 2001:500:1::53
j.root-servers.net. 603910 IN AAAA 2001:503:c27::2:30
a.root-servers.net. 603924 IN AAAA 2001:503:ba3e::2:30
l.root-servers.net. 603925 IN AAAA 2001:500:9f::42
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
;; MSG SIZE rcvd: 851
;; Sending:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47020
;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995
;; QUESTION SECTION:
;1.1.1.1.in-addr.arpa. IN A
;; QUERY SIZE: 77
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47020
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 13
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;1.1.1.1.in-addr.arpa. IN A
;; AUTHORITY SECTION:
in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa.
in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa.
;; ADDITIONAL SECTION:
a.in-addr-servers.arpa. 172800 IN A 199.180.182.53
b.in-addr-servers.arpa. 172800 IN A 199.253.183.183
c.in-addr-servers.arpa. 172800 IN A 196.216.169.10
d.in-addr-servers.arpa. 172800 IN A 200.10.60.53
e.in-addr-servers.arpa. 172800 IN A 203.119.86.101
f.in-addr-servers.arpa. 172800 IN A 193.0.9.1
a.in-addr-servers.arpa. 172800 IN AAAA 2620:37:e000::53
b.in-addr-servers.arpa. 172800 IN AAAA 2001:500:87::87
c.in-addr-servers.arpa. 172800 IN AAAA 2001:43f8:110::10
d.in-addr-servers.arpa. 172800 IN AAAA 2001:13c7:7010::53
e.in-addr-servers.arpa. 172800 IN AAAA 2001:dd8:6::101
f.in-addr-servers.arpa. 172800 IN AAAA 2001:67c:e0::1
;; Query time: 13 msec
;; SERVER: 192.58.128.30#53(192.58.128.30)
;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
;; MSG SIZE rcvd: 425
;; Sending:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36225
;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995
;; QUESTION SECTION:
;1.1.1.1.in-addr.arpa. IN A
;; QUERY SIZE: 77
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36225
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 5bf7fc1153027792010000006176356bc163b45143c14bd2 (good)
;; QUESTION SECTION:
;1.1.1.1.in-addr.arpa. IN A
;; AUTHORITY SECTION:
1.in-addr.arpa. 86400 IN NS ns2.apnic.net.
1.in-addr.arpa. 86400 IN NS rirns.arin.net.
1.in-addr.arpa. 86400 IN NS ns3.lacnic.net.
1.in-addr.arpa. 86400 IN NS apnic.authdns.ripe.net.
1.in-addr.arpa. 86400 IN NS apnic1.dnsnode.net.
;; Query time: 26 msec
;; SERVER: 203.119.86.101#53(203.119.86.101)
;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
;; MSG SIZE rcvd: 242
;; Sending:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35677
;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 5bf7fc1153027792010000006176356bc163b45143c14bd2
;; QUESTION SECTION:
;1.1.1.1.in-addr.arpa. IN A
;; QUERY SIZE: 77
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35677
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 5bf7fc1153027792010000006176356bd1232de50c54ecaa (good)
;; QUESTION SECTION:
;1.1.1.1.in-addr.arpa. IN A
;; AUTHORITY SECTION:
1.1.1.in-addr.arpa. 86400 IN NS ns3.cloudflare.com.
1.1.1.in-addr.arpa. 86400 IN NS ns7.cloudflare.com.
;; Query time: 235 msec
;; SERVER: 199.253.249.53#53(199.253.249.53)
;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
;; MSG SIZE rcvd: 127
;; Sending:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6266
;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
; COOKIE: 5bf7fc1153027792010000006176356bd1232de50c54ecaa
;; QUESTION SECTION:
;1.1.1.1.in-addr.arpa. IN A
;; QUERY SIZE: 77
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6266
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;1.1.1.1.in-addr.arpa. IN A
;; AUTHORITY SECTION:
1.1.1.in-addr.arpa. 3600 IN SOA alec.ns.cloudflare.com. dns.cloudflare.com. 2036583626 10000 2400 604800 3600
;; Query time: 297 msec
;; SERVER: 2400:cb00:2049:1::a29f:7e2#53(2400:cb00:2049:1::a29f:7e2)
;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
;; MSG SIZE rcvd: 111
%
> On 25 Oct 2021, at 13:52, Champion Xie <xiejieling at gmail.com> wrote:
>
> dig version 9.14.8
>
> Using the following command can not achieve the desired effect, dnssec information will still be output
> dig 1.1.1.1.in-addr.arpa +trace +nodnssec
>
> Normally, the parameters should not be in sequence
>
>
> --
> Best Regards!!
> champion_xie
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list