Usage:
q [OPTIONS] [@server] [type...] [name]
All long form (--) flags can be toggled with the dig-standard +[no]flag notation.
Application Options:
-q, --qname= Query name
-s, --server= DNS server(s)
-t, --type= RR type (e.g. A, AAAA, MX, etc.) or type
integer
-x, --reverse Reverse lookup
-d, --dnssec Set the DO (DNSSEC OK) bit in the OPT record
-n, --nsid Set EDNS0 NSID opt
-N, --nsid-only Set EDNS0 NSID opt and query only for the NSID
--subnet= Set EDNS0 client subnet
-c, --chaos Use CHAOS query class
-C= Set query class (default: IN 0x01) (default:
1)
-p, --odoh-proxy= ODoH proxy
--timeout= Query timeout (default: 10s)
--pad Set EDNS0 padding
--http2 Use HTTP/2 for DoH
--http3 Use HTTP/3 for DoH
--id-check Check DNS response ID (default: true)
--reuse-conn Reuse connections across queries to the same
server (default: true)
--txtconcat Concatenate TXT responses
--qid= Set query ID (-1 for random) (default: -1)
-b, --bootstrap-server= DNS server to use for bootstrapping
--bootstrap-timeout= Bootstrapping timeout (default: 5s)
--cookie= EDNS0 cookie
--recaxfr Perform recursive AXFR
-f, --format= Output format (pretty, column, json, yaml,
raw) (default: pretty)
--pretty-ttls Format TTLs in human readable format
(default: true)
--short-ttls Remove zero components of pretty TTLs.
(24h0m0s->24h) (default: true)
--color Enable color output
--question Show question section
--opt Show OPT records
--ede Show Extended DNS Errors (RFC 8914)
--answer Show answer section (default: true)
--authority Show authority section
--additional Show additional section
-S, --stats Show time statistics
--all Show all sections and statistics
-w Resolve ASN/ASName for A and AAAA records
-r, --short Show record values only
-R, --resolve-ips Resolve PTR records for IP addresses in A and
AAAA records
--round-ttls Round TTLs to the nearest minute
--aa Set AA (Authoritative Answer) flag in query
--ad Set AD (Authentic Data) flag in query
--cd Set CD (Checking Disabled) flag in query
--rd Set RD (Recursion Desired) flag in query
(default: true)
--ra Set RA (Recursion Available) flag in query
--z Set Z (Zero) flag in query
--t Set TC (Truncated) flag in query
-i, --tls-insecure-skip-verify Disable TLS certificate verification
--tls-server-name= TLS server name for host verification
--tls-min-version= Minimum TLS version to use (default: 1.0)
--tls-max-version= Maximum TLS version to use (default: 1.3)
--tls-next-protos= TLS next protocols for ALPN
--tls-cipher-suites= TLS cipher suites
--tls-curve-preferences= TLS curve preferences
--tls-client-cert= TLS client certificate file
--tls-client-key= TLS client key file
--tls-key-log-file= TLS key log file [$SSLKEYLOGFILE]
--http-user-agent= HTTP user agent
--http-method= HTTP method (default: GET)
--http-header= HTTP header in format 'Name: Value'
--pmtud PMTU discovery (default: true)
--edns Enable EDNS0 (default: true)
--tcp Use TCP for plain DNS (force TCP)
--quic-alpn-tokens= QUIC ALPN tokens (default: doq, doq-i11)
--quic-length-prefix Add RFC 9250 compliant length prefix
(default: true)
--dnscrypt-tcp Use TCP for DNSCrypt (default UDP)
--dnscrypt-udp-size= Maximum size of a DNS response this client
can sent or receive (default: 0)
--dnscrypt-key= DNSCrypt public key
--dnscrypt-provider= DNSCrypt provider name
--default-rr-types= Default record types (default: A, AAAA, NS,
MX, TXT, HTTPS, CNAME)
--udp-buffer= Set EDNS0 UDP size in query (default: 1232)
-v, --verbose Show verbose log messages
--trace Show trace log messages
-V, --version Show version and exit
Help Options:
-h, --help Show this help message
Options (74)
| Option | Description | Source |
|---|---|---|
-q, --qname | Query name | help |
-s, --server | DNS server(s) | help |
-t, --type | RR type (e.g. A, AAAA, MX, etc.) or type integer | help |
-x, --reverse | Reverse lookup | help |
-d, --dnssec | Set the DO (DNSSEC OK) bit in the OPT record | help |
-n, --nsid | Set EDNS0 NSID opt | help |
-N, --nsid-only | Set EDNS0 NSID opt and query only for the NSID | help |
--subnet | Set EDNS0 client subnet | help |
-c, --chaos | Use CHAOS query class | help |
-C | Set query class (default: IN 0x01) (default: 1) | help |
-p, --odoh-proxy | ODoH proxy | help |
--timeout | Query timeout (default: 10s) | help |
--pad | Set EDNS0 padding | help |
--http2 | Use HTTP/2 for DoH | help |
--http3 | Use HTTP/3 for DoH | help |
--id-check | Check DNS response ID (default: true) | help |
--reuse-conn | Reuse connections across queries to the same server (default: true) | help |
--txtconcat | Concatenate TXT responses | help |
--qid | Set query ID (-1 for random) (default: -1) | help |
-b, --bootstrap-server | DNS server to use for bootstrapping | help |
--bootstrap-timeout | Bootstrapping timeout (default: 5s) | help |
--cookie | EDNS0 cookie | help |
--recaxfr | Perform recursive AXFR | help |
-f, --format | Output format (pretty, column, json, yaml, raw) (default: pretty) | help |
--pretty-ttls | Format TTLs in human readable format (default: true) | help |
--short-ttls | Remove zero components of pretty TTLs. | help |
--color | Enable color output | help |
--question | Show question section | help |
--opt | Show OPT records | help |
--ede | Show Extended DNS Errors (RFC 8914) | help |
--answer | Show answer section (default: true) | help |
--authority | Show authority section | help |
--additional | Show additional section | help |
-S, --stats | Show time statistics | help |
--all | Show all sections and statistics | help |
-w | Resolve ASN/ASName for A and AAAA records | help |
-r, --short | Show record values only | help |
-R, --resolve-ips | Resolve PTR records for IP addresses in A and AAAA records | help |
--round-ttls | Round TTLs to the nearest minute | help |
--aa | Set AA (Authoritative Answer) flag in query | help |
--ad | Set AD (Authentic Data) flag in query | help |
--cd | Set CD (Checking Disabled) flag in query | help |
--rd | Set RD (Recursion Desired) flag in query (default: true) | help |
--ra | Set RA (Recursion Available) flag in query | help |
--z | Set Z (Zero) flag in query | help |
--t | Set TC (Truncated) flag in query | help |
-i, --tls-insecure-skip-verify | Disable TLS certificate verification | help |
--tls-server-name | TLS server name for host verification | help |
--tls-min-version | Minimum TLS version to use (default: 1.0) | help |
--tls-max-version | Maximum TLS version to use (default: 1.3) | help |
--tls-next-protos | TLS next protocols for ALPN | help |
--tls-cipher-suites | TLS cipher suites | help |
--tls-curve-preferences | TLS curve preferences | help |
--tls-client-cert | TLS client certificate file | help |
--tls-client-key | TLS client key file | help |
--tls-key-log-file | TLS key log file [$SSLKEYLOGFILE] | help |
--http-user-agent | HTTP user agent | help |
--http-method | HTTP method (default: GET) | help |
--http-header | HTTP header in format 'Name: Value' | help |
--pmtud | PMTU discovery (default: true) | help |
--edns | Enable EDNS0 (default: true) | help |
--tcp | Use TCP for plain DNS (force TCP) | help |
--quic-alpn-tokens | QUIC ALPN tokens (default: doq, doq-i11) | help |
--quic-length-prefix | Add RFC 9250 compliant length prefix (default: true) | help |
--dnscrypt-tcp | Use TCP for DNSCrypt (default UDP) | help |
--dnscrypt-udp-size | Maximum size of a DNS response this client can sent or receive (default: 0) | help |
--dnscrypt-key | DNSCrypt public key | help |
--dnscrypt-provider | DNSCrypt provider name | help |
--default-rr-types | Default record types (default: A, AAAA, NS, MX, TXT, HTTPS, CNAME) | help |
--udp-buffer | Set EDNS0 UDP size in query (default: 1232) | help |
-v, --verbose | Show verbose log messages | help |
--trace | Show trace log messages | help |
-V, --version | Show version and exit | help |
-h, --help | Show this help message | help |