use dig query

Champion Xie xiejieling at gmail.com
Tue Oct 26 02:53:04 UTC 2021


Sorry, there is no clear description of the problem
I describe the question again

Any parameters of the dig command should not be in sequence,
such as below
dig 1.1.1.1.in-addr.arpa PTR +trace +nodnssec  VS   dig
1.1.1.1.in-addr.arpa PTR +nodnssec  +trace

The output of these two commands after execution cannot achieve the same
effect

Mark Andrews <marka at isc.org> 于2021年10月25日周一 下午12:44写道:

> Works fine for me.
>
> % bin/dig/dig 1.1.1.1.in-addr.arpa +trace
>
> ; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace
> ;; global options: +cmd
> .                       331767  IN      NS      f.root-servers.net.
> .                       331767  IN      NS      j.root-servers.net.
> .                       331767  IN      NS      k.root-servers.net.
> .                       331767  IN      NS      l.root-servers.net.
> .                       331767  IN      NS      i.root-servers.net.
> .                       331767  IN      NS      e.root-servers.net.
> .                       331767  IN      NS      h.root-servers.net.
> .                       331767  IN      NS      b.root-servers.net.
> .                       331767  IN      NS      m.root-servers.net.
> .                       331767  IN      NS      g.root-servers.net.
> .                       331767  IN      NS      c.root-servers.net.
> .                       331767  IN      NS      d.root-servers.net.
> .                       331767  IN      NS      a.root-servers.net.
> .                       331767  IN      RRSIG   NS 8 0 518400
> 20211104170000 20211022160000 14748 .
> FERgiY720i+bYmHhXGQ2OU7NOoSM8Mhg/OedgoJrJ3Zs17/IJwUnEOkd
> EPq98F8ar7Epc9/H0p0ZxQflKrL40q/+6S/KLoR5ecoem7Vp3JN4HMI7
> U7z9gobvmBS2f7vekrFp60AXtihCcAypaWRhyl2IZUK7u11tNbN95It+
> D/7IZLa3mFrVgMmeNRdd4uoOWzHxBZ4OusHNlnJ/rvE2smIS9RwEUbDW
> iu9/psMZpfEBY5XOLg9ubKog/jma+T6OEINEdH0mzGtv4WoYAStd17Ax
> mKHsf1N9PW8rNW+c63Y36VQYXhF+ikhPG3i1Q/a9tJVbN31u5EUtz2yV eUklXw==
> ;; Received 1137 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms
>
> in-addr.arpa.           172800  IN      NS      a.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      b.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      c.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      d.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      e.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      f.in-addr-servers.arpa.
> in-addr.arpa.           86400   IN      DS      47054 8 2
> 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2
> in-addr.arpa.           86400   IN      DS      53696 8 2
> 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF
> in-addr.arpa.           86400   IN      DS      63982 8 2
> AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73
> in-addr.arpa.           86400   IN      RRSIG   DS 8 2 86400
> 20211107000000 20211024230000 52399 arpa.
> cW2ERU/EJzAVftlJSuGmnhXMKaLWDpaP5ZKyw69/x0r5u7wSuksZ9Din
> Y/dQi2ggf31k4nFBjLuBPU/FVCqoCc2VmF8RW4L4hIvo1OkcH5j0qMBI
> UcnSU8XmRbp7zE0wZfzUaNVX0VHKYr6Z0dMWuhSeB7V4moJ3L6pz0Zj+
> H6zdAaepqE0GRN/DhzuscMEL755BMypHSauBhIuf/J33p1dr4LRfe/mf
> 0J0SGB9Cxj555h504vXoCmwf96qwWNTyGzakwVTRVRvtMbIsg+8nJHJ4
> pcPHq3kOtrTYdY38z4BtJV0klaJIL2JYNUqFQkOeZRWsNLymz6gnfnBb Pr2oVA==
> ;; Received 861 bytes from 2001:500:1::53#53(h.root-servers.net) in 308 ms
>
> 1.in-addr.arpa.         86400   IN      NS      ns2.apnic.net.
> 1.in-addr.arpa.         86400   IN      NS      ns3.lacnic.net.
> 1.in-addr.arpa.         86400   IN      NS      apnic.authdns.ripe.net.
> 1.in-addr.arpa.         86400   IN      NS      rirns.arin.net.
> 1.in-addr.arpa.         86400   IN      NS      apnic1.dnsnode.net.
> 1.in-addr.arpa.         86400   IN      DS      23004 13 2
> 3582737862817D55F8F7473BC58E620CFD4A0E1EF88F05C42C963113 3E32E894
> 1.in-addr.arpa.         86400   IN      RRSIG   DS 8 3 86400
> 20211107150454 20211017145555 51651 in-addr.arpa.
> FwkrCN7wo52nR6w5E6oyxrxOYWW+gzGK2EaWf0UgCELSKuZLqNFqnlLY
> +NWtott7UzXJmSl1OxmO74o13+mKJcgbYaTdbCQCeGgda68hxooP+LQ3
> AxEXnKYwyI803nOG9LVxIt03ln8S9r3bOje0i+AvZMjX5D+nO2fbW6K6 rVw=
> ;; Received 408 bytes from 2001:500:87::87#53(b.in-addr-servers.arpa) in
> 348 ms
>
> 1.1.1.in-addr.arpa.     86400   IN      NS      ns7.cloudflare.com.
> 1.1.1.in-addr.arpa.     86400   IN      NS      ns3.cloudflare.com.
> 99g3opuj99svu7j0634fc9ib4os7hqim.1.in-addr.arpa. 3600 IN NSEC3 1 0 5
> 70A93501FFC3E41D 99PTB70MBGKHRHBLB8TLUG7DII191IOA NS
> 99g3opuj99svu7j0634fc9ib4os7hqim.1.in-addr.arpa. 3600 IN RRSIG NSEC3 13 4
> 3600 20211105031842 20211021014842 2679 1.in-addr.arpa.
> PrGfRRQwXHSY237HPzTEAepc5ylC2v99BOEGlzfwIAN6lbYEapX2AoqL
> YzlBnk4PyfftZS+xURjjkS+kxzLWcA==
> ;; Received 333 bytes from 203.119.95.53#53(ns2.apnic.net) in 29 ms
>
> 1.1.1.in-addr.arpa.     3600    IN      SOA     alec.ns.cloudflare.com.
> dns.cloudflare.com. 2036583626 10000 2400 604800 3600
> ;; Received 111 bytes from 162.159.4.8#53(ns7.cloudflare.com) in 17 ms
>
> % bin/dig/dig 1.1.1.1.in-addr.arpa +trace +nodnssec
>
> ; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace +nodnssec
> ;; global options: +cmd
> .                       331756  IN      NS      k.root-servers.net.
> .                       331756  IN      NS      i.root-servers.net.
> .                       331756  IN      NS      g.root-servers.net.
> .                       331756  IN      NS      j.root-servers.net.
> .                       331756  IN      NS      b.root-servers.net.
> .                       331756  IN      NS      c.root-servers.net.
> .                       331756  IN      NS      f.root-servers.net.
> .                       331756  IN      NS      d.root-servers.net.
> .                       331756  IN      NS      m.root-servers.net.
> .                       331756  IN      NS      e.root-servers.net.
> .                       331756  IN      NS      a.root-servers.net.
> .                       331756  IN      NS      l.root-servers.net.
> .                       331756  IN      NS      h.root-servers.net.
> ;; Received 851 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms
>
> in-addr.arpa.           172800  IN      NS      a.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      b.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      c.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      d.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      e.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      f.in-addr-servers.arpa.
> ;; Received 425 bytes from 192.5.5.241#53(f.root-servers.net) in 13 ms
>
> 1.in-addr.arpa.         86400   IN      NS      ns2.apnic.net.
> 1.in-addr.arpa.         86400   IN      NS      ns3.lacnic.net.
> 1.in-addr.arpa.         86400   IN      NS      apnic.authdns.ripe.net.
> 1.in-addr.arpa.         86400   IN      NS      rirns.arin.net.
> 1.in-addr.arpa.         86400   IN      NS      apnic1.dnsnode.net.
> ;; Received 188 bytes from 193.0.9.1#53(f.in-addr-servers.arpa) in 303 ms
>
> 1.1.1.in-addr.arpa.     86400   IN      NS      ns7.cloudflare.com.
> 1.1.1.in-addr.arpa.     86400   IN      NS      ns3.cloudflare.com.
> ;; Received 127 bytes from 2620:38:2000::53#53(rirns.arin.net) in 291 ms
>
> 1.1.1.in-addr.arpa.     3600    IN      SOA     alec.ns.cloudflare.com.
> dns.cloudflare.com. 2036583626 10000 2400 604800 3600
> ;; Received 111 bytes from 2400:cb00:2049:1::a29f:408#53(
> ns7.cloudflare.com) in 298 ms
>
> %
>
> If you add +qr +all you can see the outgoing queries don’t have DO set.
>
> % bin/dig/dig 1.1.1.1.in-addr.arpa +trace +nodnssec +qr +all
>
> ; <<>> DiG 9.14.8 <<>> 1.1.1.1.in-addr.arpa +trace +nodnssec +qr +all
> ;; global options: +cmd
> ;; Sending:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44117
> ;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: 5bf7fc1153027792
> ;; QUESTION SECTION:
> ;.                              IN      NS
>
> ;; QUERY SIZE: 40
>
> ;; BADCOOKIE, retrying.
> ;; Sending:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6212
> ;; flags: rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995
> ;; QUESTION SECTION:
> ;.                              IN      NS
>
> ;; QUERY SIZE: 56
>
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6212
> ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 27
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995 (good)
> ;; QUESTION SECTION:
> ;.                              IN      NS
>
> ;; ANSWER SECTION:
> .                       331627  IN      NS      i.root-servers.net.
> .                       331627  IN      NS      l.root-servers.net.
> .                       331627  IN      NS      c.root-servers.net.
> .                       331627  IN      NS      k.root-servers.net.
> .                       331627  IN      NS      h.root-servers.net.
> .                       331627  IN      NS      d.root-servers.net.
> .                       331627  IN      NS      a.root-servers.net.
> .                       331627  IN      NS      m.root-servers.net.
> .                       331627  IN      NS      f.root-servers.net.
> .                       331627  IN      NS      b.root-servers.net.
> .                       331627  IN      NS      e.root-servers.net.
> .                       331627  IN      NS      j.root-servers.net.
> .                       331627  IN      NS      g.root-servers.net.
>
> ;; ADDITIONAL SECTION:
> g.root-servers.net.     603919  IN      A       192.112.36.4
> k.root-servers.net.     603910  IN      A       193.0.14.129
> i.root-servers.net.     603922  IN      A       192.36.148.17
> m.root-servers.net.     603920  IN      A       202.12.27.33
> e.root-servers.net.     603909  IN      A       192.203.230.10
> b.root-servers.net.     603919  IN      A       199.9.14.201
> c.root-servers.net.     603920  IN      A       192.33.4.12
> f.root-servers.net.     603912  IN      A       192.5.5.241
> d.root-servers.net.     603922  IN      A       199.7.91.13
> h.root-servers.net.     603911  IN      A       198.97.190.53
> j.root-servers.net.     603910  IN      A       192.58.128.30
> a.root-servers.net.     603924  IN      A       198.41.0.4
> l.root-servers.net.     603925  IN      A       199.7.83.42
> g.root-servers.net.     603919  IN      AAAA    2001:500:12::d0d
> k.root-servers.net.     603910  IN      AAAA    2001:7fd::1
> i.root-servers.net.     603924  IN      AAAA    2001:7fe::53
> m.root-servers.net.     603920  IN      AAAA    2001:dc3::35
> e.root-servers.net.     603909  IN      AAAA    2001:500:a8::e
> b.root-servers.net.     603917  IN      AAAA    2001:500:200::b
> c.root-servers.net.     603919  IN      AAAA    2001:500:2::c
> f.root-servers.net.     603912  IN      AAAA    2001:500:2f::f
> d.root-servers.net.     603922  IN      AAAA    2001:500:2d::d
> h.root-servers.net.     603911  IN      AAAA    2001:500:1::53
> j.root-servers.net.     603910  IN      AAAA    2001:503:c27::2:30
> a.root-servers.net.     603924  IN      AAAA    2001:503:ba3e::2:30
> l.root-servers.net.     603925  IN      AAAA    2001:500:9f::42
>
> ;; Query time: 0 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
> ;; MSG SIZE  rcvd: 851
>
> ;; Sending:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47020
> ;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995
> ;; QUESTION SECTION:
> ;1.1.1.1.in-addr.arpa.          IN      A
>
> ;; QUERY SIZE: 77
>
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47020
> ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 13
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1472
> ;; QUESTION SECTION:
> ;1.1.1.1.in-addr.arpa.          IN      A
>
> ;; AUTHORITY SECTION:
> in-addr.arpa.           172800  IN      NS      a.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      b.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      c.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      d.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      e.in-addr-servers.arpa.
> in-addr.arpa.           172800  IN      NS      f.in-addr-servers.arpa.
>
> ;; ADDITIONAL SECTION:
> a.in-addr-servers.arpa. 172800  IN      A       199.180.182.53
> b.in-addr-servers.arpa. 172800  IN      A       199.253.183.183
> c.in-addr-servers.arpa. 172800  IN      A       196.216.169.10
> d.in-addr-servers.arpa. 172800  IN      A       200.10.60.53
> e.in-addr-servers.arpa. 172800  IN      A       203.119.86.101
> f.in-addr-servers.arpa. 172800  IN      A       193.0.9.1
> a.in-addr-servers.arpa. 172800  IN      AAAA    2620:37:e000::53
> b.in-addr-servers.arpa. 172800  IN      AAAA    2001:500:87::87
> c.in-addr-servers.arpa. 172800  IN      AAAA    2001:43f8:110::10
> d.in-addr-servers.arpa. 172800  IN      AAAA    2001:13c7:7010::53
> e.in-addr-servers.arpa. 172800  IN      AAAA    2001:dd8:6::101
> f.in-addr-servers.arpa. 172800  IN      AAAA    2001:67c:e0::1
>
> ;; Query time: 13 msec
> ;; SERVER: 192.58.128.30#53(192.58.128.30)
> ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
> ;; MSG SIZE  rcvd: 425
>
> ;; Sending:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36225
> ;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: 5bf7fc1153027792010000006176356b9edf4882b7083995
> ;; QUESTION SECTION:
> ;1.1.1.1.in-addr.arpa.          IN      A
>
> ;; QUERY SIZE: 77
>
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36225
> ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; COOKIE: 5bf7fc1153027792010000006176356bc163b45143c14bd2 (good)
> ;; QUESTION SECTION:
> ;1.1.1.1.in-addr.arpa.          IN      A
>
> ;; AUTHORITY SECTION:
> 1.in-addr.arpa.         86400   IN      NS      ns2.apnic.net.
> 1.in-addr.arpa.         86400   IN      NS      rirns.arin.net.
> 1.in-addr.arpa.         86400   IN      NS      ns3.lacnic.net.
> 1.in-addr.arpa.         86400   IN      NS      apnic.authdns.ripe.net.
> 1.in-addr.arpa.         86400   IN      NS      apnic1.dnsnode.net.
>
> ;; Query time: 26 msec
> ;; SERVER: 203.119.86.101#53(203.119.86.101)
> ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
> ;; MSG SIZE  rcvd: 242
>
> ;; Sending:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35677
> ;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: 5bf7fc1153027792010000006176356bc163b45143c14bd2
> ;; QUESTION SECTION:
> ;1.1.1.1.in-addr.arpa.          IN      A
>
> ;; QUERY SIZE: 77
>
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35677
> ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; COOKIE: 5bf7fc1153027792010000006176356bd1232de50c54ecaa (good)
> ;; QUESTION SECTION:
> ;1.1.1.1.in-addr.arpa.          IN      A
>
> ;; AUTHORITY SECTION:
> 1.1.1.in-addr.arpa.     86400   IN      NS      ns3.cloudflare.com.
> 1.1.1.in-addr.arpa.     86400   IN      NS      ns7.cloudflare.com.
>
> ;; Query time: 235 msec
> ;; SERVER: 199.253.249.53#53(199.253.249.53)
> ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
> ;; MSG SIZE  rcvd: 127
>
> ;; Sending:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6266
> ;; flags: ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ; COOKIE: 5bf7fc1153027792010000006176356bd1232de50c54ecaa
> ;; QUESTION SECTION:
> ;1.1.1.1.in-addr.arpa.          IN      A
>
> ;; QUERY SIZE: 77
>
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6266
> ;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ;; QUESTION SECTION:
> ;1.1.1.1.in-addr.arpa.          IN      A
>
> ;; AUTHORITY SECTION:
> 1.1.1.in-addr.arpa.     3600    IN      SOA     alec.ns.cloudflare.com.
> dns.cloudflare.com. 2036583626 10000 2400 604800 3600
>
> ;; Query time: 297 msec
> ;; SERVER: 2400:cb00:2049:1::a29f:7e2#53(2400:cb00:2049:1::a29f:7e2)
> ;; WHEN: Mon Oct 25 15:41:15 AEDT 2021
> ;; MSG SIZE  rcvd: 111
>
> %
>
> > On 25 Oct 2021, at 13:52, Champion Xie <xiejieling at gmail.com> wrote:
> >
> >  dig version 9.14.8
> >
> > Using the following command can not achieve the desired effect, dnssec
> information will still be output
> > dig 1.1.1.1.in-addr.arpa   +trace +nodnssec
> >
> > Normally, the parameters should not be in sequence
> >
> >
> > --
> > Best Regards!!
> > champion_xie
> > _______________________________________________
> > Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
> >
> > ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
> >
> >
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
>
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742              INTERNET: marka at isc.org
>
>

-- 
Best Regards!!
champion_xie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20211026/1fd8592b/attachment-0001.htm>


More information about the bind-users mailing list