OS Manuals

/usr/bin/q

A tiny command line DNS client with support for UDP, TCP, DoT, DoH, DoQ and ODoH.

From q 0.19.12-r21 (os), captured 2026-11-05 by running q --help (exit 1). permalink

Usage:
  q [OPTIONS] [@server] [type...] [name]

All long form (--) flags can be toggled with the dig-standard +[no]flag notation.

Application Options:
  -q, --qname=                    Query name
  -s, --server=                   DNS server(s)
  -t, --type=                     RR type (e.g. A, AAAA, MX, etc.) or type
                                  integer
  -x, --reverse                   Reverse lookup
  -d, --dnssec                    Set the DO (DNSSEC OK) bit in the OPT record
  -n, --nsid                      Set EDNS0 NSID opt
  -N, --nsid-only                 Set EDNS0 NSID opt and query only for the NSID
      --subnet=                   Set EDNS0 client subnet
  -c, --chaos                     Use CHAOS query class
  -C=                             Set query class (default: IN 0x01) (default:
                                  1)
  -p, --odoh-proxy=               ODoH proxy
      --timeout=                  Query timeout (default: 10s)
      --pad                       Set EDNS0 padding
      --http2                     Use HTTP/2 for DoH
      --http3                     Use HTTP/3 for DoH
      --id-check                  Check DNS response ID (default: true)
      --reuse-conn                Reuse connections across queries to the same
                                  server (default: true)
      --txtconcat                 Concatenate TXT responses
      --qid=                      Set query ID (-1 for random) (default: -1)
  -b, --bootstrap-server=         DNS server to use for bootstrapping
      --bootstrap-timeout=        Bootstrapping timeout (default: 5s)
      --cookie=                   EDNS0 cookie
      --recaxfr                   Perform recursive AXFR
  -f, --format=                   Output format (pretty, column, json, yaml,
                                  raw) (default: pretty)
      --pretty-ttls               Format TTLs in human readable format
                                  (default: true)
      --short-ttls                Remove zero components of pretty TTLs.
                                  (24h0m0s->24h) (default: true)
      --color                     Enable color output
      --question                  Show question section
      --opt                       Show OPT records
      --ede                       Show Extended DNS Errors (RFC 8914)
      --answer                    Show answer section (default: true)
      --authority                 Show authority section
      --additional                Show additional section
  -S, --stats                     Show time statistics
      --all                       Show all sections and statistics
  -w                              Resolve ASN/ASName for A and AAAA records
  -r, --short                     Show record values only
  -R, --resolve-ips               Resolve PTR records for IP addresses in A and
                                  AAAA records
      --round-ttls                Round TTLs to the nearest minute
      --aa                        Set AA (Authoritative Answer) flag in query
      --ad                        Set AD (Authentic Data) flag in query
      --cd                        Set CD (Checking Disabled) flag in query
      --rd                        Set RD (Recursion Desired) flag in query
                                  (default: true)
      --ra                        Set RA (Recursion Available) flag in query
      --z                         Set Z (Zero) flag in query
      --t                         Set TC (Truncated) flag in query
  -i, --tls-insecure-skip-verify  Disable TLS certificate verification
      --tls-server-name=          TLS server name for host verification
      --tls-min-version=          Minimum TLS version to use (default: 1.0)
      --tls-max-version=          Maximum TLS version to use (default: 1.3)
      --tls-next-protos=          TLS next protocols for ALPN
      --tls-cipher-suites=        TLS cipher suites
      --tls-curve-preferences=    TLS curve preferences
      --tls-client-cert=          TLS client certificate file
      --tls-client-key=           TLS client key file
      --tls-key-log-file=         TLS key log file [$SSLKEYLOGFILE]
      --http-user-agent=          HTTP user agent
      --http-method=              HTTP method (default: GET)
      --http-header=              HTTP header in format 'Name: Value'
      --pmtud                     PMTU discovery (default: true)
      --edns                      Enable EDNS0 (default: true)
      --tcp                       Use TCP for plain DNS (force TCP)
      --quic-alpn-tokens=         QUIC ALPN tokens (default: doq, doq-i11)
      --quic-length-prefix        Add RFC 9250 compliant length prefix
                                  (default: true)
      --dnscrypt-tcp              Use TCP for DNSCrypt (default UDP)
      --dnscrypt-udp-size=        Maximum size of a DNS response this client
                                  can sent or receive (default: 0)
      --dnscrypt-key=             DNSCrypt public key
      --dnscrypt-provider=        DNSCrypt provider name
      --default-rr-types=         Default record types (default: A, AAAA, NS,
                                  MX, TXT, HTTPS, CNAME)
      --udp-buffer=               Set EDNS0 UDP size in query (default: 1232)
  -v, --verbose                   Show verbose log messages
      --trace                     Show trace log messages
  -V, --version                   Show version and exit

Help Options:
  -h, --help                      Show this help message
Options (74)
OptionDescriptionSource
-q, --qnameQuery namehelp
-s, --serverDNS server(s)help
-t, --typeRR type (e.g. A, AAAA, MX, etc.) or type integerhelp
-x, --reverseReverse lookuphelp
-d, --dnssecSet the DO (DNSSEC OK) bit in the OPT recordhelp
-n, --nsidSet EDNS0 NSID opthelp
-N, --nsid-onlySet EDNS0 NSID opt and query only for the NSIDhelp
--subnetSet EDNS0 client subnethelp
-c, --chaosUse CHAOS query classhelp
-CSet query class (default: IN 0x01) (default: 1)help
-p, --odoh-proxyODoH proxyhelp
--timeoutQuery timeout (default: 10s)help
--padSet EDNS0 paddinghelp
--http2Use HTTP/2 for DoHhelp
--http3Use HTTP/3 for DoHhelp
--id-checkCheck DNS response ID (default: true)help
--reuse-connReuse connections across queries to the same server (default: true)help
--txtconcatConcatenate TXT responseshelp
--qidSet query ID (-1 for random) (default: -1)help
-b, --bootstrap-serverDNS server to use for bootstrappinghelp
--bootstrap-timeoutBootstrapping timeout (default: 5s)help
--cookieEDNS0 cookiehelp
--recaxfrPerform recursive AXFRhelp
-f, --formatOutput format (pretty, column, json, yaml, raw) (default: pretty)help
--pretty-ttlsFormat TTLs in human readable format (default: true)help
--short-ttlsRemove zero components of pretty TTLs.help
--colorEnable color outputhelp
--questionShow question sectionhelp
--optShow OPT recordshelp
--edeShow Extended DNS Errors (RFC 8914)help
--answerShow answer section (default: true)help
--authorityShow authority sectionhelp
--additionalShow additional sectionhelp
-S, --statsShow time statisticshelp
--allShow all sections and statisticshelp
-wResolve ASN/ASName for A and AAAA recordshelp
-r, --shortShow record values onlyhelp
-R, --resolve-ipsResolve PTR records for IP addresses in A and AAAA recordshelp
--round-ttlsRound TTLs to the nearest minutehelp
--aaSet AA (Authoritative Answer) flag in queryhelp
--adSet AD (Authentic Data) flag in queryhelp
--cdSet CD (Checking Disabled) flag in queryhelp
--rdSet RD (Recursion Desired) flag in query (default: true)help
--raSet RA (Recursion Available) flag in queryhelp
--zSet Z (Zero) flag in queryhelp
--tSet TC (Truncated) flag in queryhelp
-i, --tls-insecure-skip-verifyDisable TLS certificate verificationhelp
--tls-server-nameTLS server name for host verificationhelp
--tls-min-versionMinimum TLS version to use (default: 1.0)help
--tls-max-versionMaximum TLS version to use (default: 1.3)help
--tls-next-protosTLS next protocols for ALPNhelp
--tls-cipher-suitesTLS cipher suiteshelp
--tls-curve-preferencesTLS curve preferenceshelp
--tls-client-certTLS client certificate filehelp
--tls-client-keyTLS client key filehelp
--tls-key-log-fileTLS key log file [$SSLKEYLOGFILE]help
--http-user-agentHTTP user agenthelp
--http-methodHTTP method (default: GET)help
--http-headerHTTP header in format 'Name: Value'help
--pmtudPMTU discovery (default: true)help
--ednsEnable EDNS0 (default: true)help
--tcpUse TCP for plain DNS (force TCP)help
--quic-alpn-tokensQUIC ALPN tokens (default: doq, doq-i11)help
--quic-length-prefixAdd RFC 9250 compliant length prefix (default: true)help
--dnscrypt-tcpUse TCP for DNSCrypt (default UDP)help
--dnscrypt-udp-sizeMaximum size of a DNS response this client can sent or receive (default: 0)help
--dnscrypt-keyDNSCrypt public keyhelp
--dnscrypt-providerDNSCrypt provider namehelp
--default-rr-typesDefault record types (default: A, AAAA, NS, MX, TXT, HTTPS, CNAME)help
--udp-bufferSet EDNS0 UDP size in query (default: 1232)help
-v, --verboseShow verbose log messageshelp
--traceShow trace log messageshelp
-V, --versionShow version and exithelp
-h, --helpShow this help messagehelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.