Dig

Quelques petites options de dig histoire d’ouvrir la nouvelle catégorie “DNS/Bind”

• Version de Bind

$ dig @ns-ext.isc.org. chaos txt version.bind +short  
"9.4.1-P1"  
$  
$ dig @ns-ext.isc.org. chaos txt authors.bind +short | head -2  
"Bob Halley"  
"David Lawrence"  
$  
$ dig @ns-ext.isc.org. chaos txt hostname.bind +short  
"ns-ext.pao1.isc.org"  
$

• Transfert de zone

$ dig axfr @raff.debian.org. debian.org | head -10  

; <<>> DiG 9.3.4 <<>> axfr @raff.debian.org. debian.org  
; (1 server found)  
;; global options: printcmd  
debian.org. 3600 IN SOA samosa.debian.org. hostmaster.debian.org. 2007081601 10800 3600 604800 3600  
debian.org. 3600 IN A 192.25.206.10  
debian.org. 3600 IN MX 0 master.debian.org.  
debian.org. 3600 IN NS raff.debian.org.  
debian.org. 3600 IN NS rietz.debian.org.  
debian.org. 3600 IN NS klecker.debian.org.  
$

• Suivre la chaîne de résolution +trace

$ dig www.isc.org +trace  

; <<>> DiG 9.3.4 <<>> www.isc.org +trace  
;; global options: printcmd  
. 3561749 IN NS d.root-servers.net.  
. 3561749 IN NS a.root-servers.net.  
. 3561749 IN NS l.root-servers.net.  
. 3561749 IN NS c.root-servers.net.  
. 3561749 IN NS m.root-servers.net.  
. 3561749 IN NS h.root-servers.net.  
. 3561749 IN NS f.root-servers.net.  
. 3561749 IN NS e.root-servers.net.  
. 3561749 IN NS j.root-servers.net.  
. 3561749 IN NS i.root-servers.net.  
. 3561749 IN NS g.root-servers.net.  
. 3561749 IN NS k.root-servers.net.  
. 3561749 IN NS b.root-servers.net.  
;; Received 436 bytes from 192.168.1.1#53(192.168.1.1) in 46 ms  

org. 172800 IN NS TLD3.ULTRADNS.org.  
org. 172800 IN NS TLD4.ULTRADNS.org.  
org. 172800 IN NS TLD5.ULTRADNS.INFO.  
org. 172800 IN NS TLD6.ULTRADNS.CO.UK.  
org. 172800 IN NS TLD1.ULTRADNS.NET.  
org. 172800 IN NS TLD2.ULTRADNS.NET.  
;; Received 343 bytes from 128.8.10.90#53(d.root-servers.net) in 123 ms  

isc.org. 86400 IN NS ns-ext.sth1.isc.org.  
isc.org. 86400 IN NS ns-ext.nrt1.isc.org.  
isc.org. 86400 IN NS ns-ext.lga1.isc.org.  
isc.org. 86400 IN NS ns-ext.isc.org.  
;; Received 192 bytes from 199.7.66.1#53(TLD3.ULTRADNS.org) in 126 ms  

www.isc.org. 600 IN A 204.152.184.88  
isc.org. 3600 IN NS ns-ext.isc.org.  
isc.org. 3600 IN NS ns-ext.lga1.isc.org.  
isc.org. 3600 IN NS ns-ext.nrt1.isc.org.  
isc.org. 3600 IN NS ns-ext.sth1.isc.org.  
;; Received 236 bytes from 192.228.89.19#53(ns-ext.sth1.isc.org) in 78 ms  
$

• Nom associé à une IP

$ dig -x 204.152.184.88 +short
external.isc.org.
$

• Requête itérative (non récursive)

$ dig mx isc.org @monserveurDNS +norec   

; <<>> DiG 9.3.4 <<>> mx isc.org @monserveurDNS +norec  
; (1 server found)  
;; global options: printcmd  
;; Got answer:  
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48381  
;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 6  

;; QUESTION SECTION:  
;isc.org. IN MX  

;; AUTHORITY SECTION:  
org. 59611 IN NS tld3.ultradns.org.  
org. 59611 IN NS tld4.ultradns.org.  
org. 59611 IN NS tld5.ultradns.info.  
org. 59611 IN NS tld6.ultradns.co.uk.  
org. 59611 IN NS tld1.ultradns.net.  
org. 59611 IN NS tld2.ultradns.net.  

;; ADDITIONAL SECTION:  
tld3.ultradns.org. 59611 IN A 199.7.66.1  
tld4.ultradns.org. 59611 IN A 199.7.67.1  
tld5.ultradns.info. 59611 IN A 192.100.59.11  
tld6.ultradns.co.uk. 59611 IN A 198.133.199.11  
tld1.ultradns.net. 59611 IN A 204.74.112.1  
tld2.ultradns.net. 59611 IN A 204.74.113.1  

;; Query time: 1 msec  
;; SERVER: monserveurDNS#53(monserveurDNS)  
;; WHEN: Wed Jan 01 01:01:01 2007  
;; MSG SIZE rcvd: 283  

• La même requête récursive (par défaut)

$ dig mx isc.org @monserveurDNS  

; <<>> DiG 9.3.4 <<>> mx isc.org @monserveurDNS  
; (1 server found)  
;; global options: printcmd  
;; Got answer:  
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25492  
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2  

;; QUESTION SECTION:  
;isc.org. IN MX  

;; ANSWER SECTION:  
isc.org. 3249 IN MX 10 mx.isc.org.  
isc.org. 3249 IN MX 15 mx.sth1.isc.org.  

;; ADDITIONAL SECTION:  
mx.isc.org. 3249 IN A 204.152.184.167  
mx.sth1.isc.org. 3249 IN A 192.228.89.21  

;; Query time: 5 msec  
;; SERVER: monserveurDNS#53(monserveurDNS)  
;; WHEN: Wed Jan 01 01:01:01 2007  
;; MSG SIZE rcvd: 100  
$

• Simplifier la lecture des valeurs du SOA (+multiline)

$ dig soa isc.org. @ns-ext.isc.org. +multiline  
(extrait)  
isc.org. 3600 IN SOA ns-int.isc.org. hostmaster.isc.org. (  
2007090900 ; serial  
7200 ; refresh (2 hours)  
3600 ; retry (1 hour)  
24796800 ; expire (41 weeks)  
3600 ; minimum (1 hour)  
)  

Sinon c’est moins lisible

$ dig soa isc.org. @ns-ext.isc.org.  
(extrait)  
isc.org. 3600 IN SOA ns-int.isc.org. hostmaster.isc.org. 2007090900 7200 3600 24796800 3600