dig 활용방법가이드 2004. 6. IP 주소관리팀 한국인터넷정보센터
- 목차 - 1. dig 3 dig (Domain Information Groper) 3 dig? 3 nslookup dig? 3 dig? 3 2. dig 4 4 IP (IPv4, IPv6) 5 dig 7 IPv6 DNS 10 3. dig 13 dig 13 dig DNS TCP/UDP 2 0 dig DNS IP 2 2 IXFR(Incremental Zone Transfer) 24 AXFR 2 6 EDNS0 31 4. dig 32 BIND DNS dig 3 2 Unix dig 3 2 Windows dig 33 한국인터넷정보센터 2
Dig (Domain Information Groper) 1. dig dig (Domain Information Groper) BIND DNS DNS DNS lookup nslookup (nslookup ) dig? DNS, DNS ISP ADSL/VDSL DNS nslookup dig? nslookup dig DNS dig BIND DNS, BIND DNS ISC(Internet Systems Consortium) nslookup, dig dig? dig BIND DNS Unix Linux OS dig, OS Windows OS, BIND DNS dig 4. dig 한국인터넷정보센터 3
2. dig dig [@server] [name] [type] server name type DNS (domain name) IP : resolv.conf resolv.conf, localhost Note: IP IPv4 IPv6 IPv6 : Unix, Linux OS DNS Question Section QName : (.) DNS Question Section QType RR : name : (.) NS name : A DNS c:\>dig www.nic.or.kr A ; <<>> DiG 9.2.3 <<>> www.nic.or.kr A ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;www.nic.or.kr. IN A www.nic.or.kr. 1772 IN A 202.30.50.90 nic.or.kr. 1798 IN NS ns2.nic.or.kr. nic.or.kr. 1798 IN NS ns1.nic.or.kr. ;; ADDITIONAL SECTION: ns1.nic.or.kr. 1791 IN A 202.30.50.51 ns2.nic.or.kr. 1798 IN A 220.73.220.113 ;; Query time: 100 msec ;; WHEN: Wed Jun 23 19:18:52 2004 ;; MSG SIZE rcvd: 115 한국인터넷정보센터 4
IP (IPv4, IPv6) dig [@server] -x ip_address server -x ip_address DNS (domain name) IP : resolv.conf resolv.conf, localhost Note: IP IPv4 IPv6 IPv6 : Unix, Linux OS IP IPv4 : in-addr.arpa. IPv6 : ip6.arpa. Note: IPv6 dig BIND DNS 9.2.3 dig BIND DNS 8.3.2 dig IPv4 C:\>dig -x 202.31.190.222 ; <<>> DiG 9.2.3 <<>> -x 202.31.190.222 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4 ;222.190.31.202.in-addr.arpa. IN PTR 222.190.31.202.in-addr.arpa. 180 IN PTR rec.test.kr. 190.31.202.in-addr.arpa. 180 IN NS ns2.test.kr. 190.31.202.in-addr.arpa. 180 IN NS ns1.test.kr. ;; ADDITIONAL SECTION: ns1.test.kr. 180 IN A 202.31.190.200 ns1.test.kr. 180 IN AAAA 2001:dc5:a::200 ns2.test.kr. 180 IN A 202.31.190.210 ns2.test.kr. 180 IN AAAA 2001:dc5:a::210 ;; Query time: 140 msec ;; WHEN: Thu Jun 24 16:17:39 2004 ;; MSG SIZE rcvd: 194 한국인터넷정보센터 5
IPv6 c:\>dig -x 2001:6b0:1:ea:a00:20ff:fe8f:708f ; <<>> DiG 9.2.3 <<>> -x 2001:6b0:1:ea:a00:20ff:fe8f:708f ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0 ;f.8.0.7.f.8.e.f.f.f.0.2.0.0.a.0.a.e.0.0.1.0.0.0.0.b.6.0.1.0.0.2.ip6.arpa. IN PTR f.8.0.7.f.8.e.f.f.f.0.2.0.0.a.0.a.e.0.0.1.0.0.0.0.b.6.0.1.0.0.2.ip6.arpa. 3600 IN PTR renskav.stacken.kth.se. a.e.0.0.1.0.0.0.0.b.6.0.1.0.0.2.ip6.arpa. 3600 IN NS ns.stacken.kth.se. ;; Query time: 1622 msec ;; WHEN: Wed Jun 23 17:19:21 2004 ;; MSG SIZE rcvd: 143 한국인터넷정보센터 6
dig dig DNS.. c:\>dig www.nic.or.kr A ; <<>> DiG 9.2.3 <<>> www.nic.or.kr A ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;www.nic.or.kr. IN A www.nic.or.kr. 1772 IN A 202.30.50.90 nic.or.kr. 1798 IN NS ns2.nic.or.kr. nic.or.kr. 1798 IN NS ns1.nic.or.kr. ;; ADDITIONAL SECTION: ns1.nic.or.kr. 1791 IN A 202.30.50.51 ns2.nic.or.kr. 1798 IN A 220.73.220.113 ;; Query time: 100 msec ;; WHEN: Wed Jun 23 19:18:52 2004 ;; MSG SIZE rcvd: 115 dig DNS Header, Question Section, Answer Section, Authority Section, Addition Section. dig DNS, DNS, DNS. ; <<>> DiG 9.2.3 <<>> www.nic.or.kr A ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 >>DIG 9.2.3<< opcode: dig (dig BIND DNS ) dig DNS operation code DNS DNS : QUERY : Standard Query IQUERY : Inverse Query ( ) STATUS : Server Status Request NOTIFY : DNS Notify Message UPDATE : DNS Dynamic Update Message 한국인터넷정보센터 7
status: id: flags: DNS RCODE(Response Code) RCODE : NOERROR : No Error [Standard Query] FORMERR : Format Error [Standard Query] SERVFAIL : Server Failure [Standard Query] NXDOMAIN : Non-Existent Domain [Standard Query] NOTIMP : Not Implemented [Standard Query] REFUSED : Query Refused [Standard Query] YXDOMAIN : N am e Exists w hen it should not [DN S UPDATE] YXRRSET : RR Set Exists when it should not [DNS UPDATE] NXRRSET : RR Set that should exist does not [DNS UPDATE] NOTAUTH : Server Not Authoritative for zone [DNS UPDATE] NOTZONE : Name not contained in zone [DNS UPDATE] BADVERS : Bad OPT Version [EDNS0] Standard Query RFC1035, "DOMAIN NAMES - IMPLEMENTATION AND SPECIFICATION", DNS DNS UPDATE = DNS Dynamic Update RFC2136, "Dynamic Updates in the Domain Name System (DNS UPDATE)", DNS Dynamic Update ( RR ) EDNS0 RFC2671, "Extension Mechanisms for DNS (EDNS0)" DNS flag DNS DNS transaction ID DNS DNS DNS DNS Header Section flag flag : qr : Query/Response bit (set = Response) rd : Recursion Desired (set = Recursion Desired) ra : Recursion Available (set = Recursion Available, Server) tc : Truncation (set = Message is truncated) aa : Authoritative Answer (set = Authoritative Answer) ad : flag, Authentic Data cd : flag, Checking Disabled RFC1035, "DOMAIN NAMES - IMPLEMENTATION AND SPECIFICATION", 4.1.1. Header section format flag QUERY: ANSWER: AUTHORITY: ADDITIONAL: RFC2535, "Domain Name System Security Extensions", '6.1. The AD and CD Header Bits' flag DNS Query Section RR ( 1) DNS Header Section QDCOUNT DNS Answer Section RR DNS Header Section ANCOUNT DNS Authority Section RR DNS Header Section NSCOUNT DNS Additional Section RR DNS Header Section ARCOUNT 한국인터넷정보센터 8
;www.nic.or.kr. IN A www.nic.or.kr. 1772 IN A 202.30.50.90 nic.or.kr. 1798 IN NS ns2.nic.or.kr. nic.or.kr. 1798 IN NS ns1.nic.or.kr. ;; ADDITIONAL SECTION: ns1.nic.or.kr. 1791 IN A 202.30.50.51 ns2.nic.or.kr. 1798 IN A 220.73.220.113 DNS DNS DNS RR DNS RR NS RR nic.or.kr. (zone) www.nic.or.kr nic.or.kr SOA RR RR ;; ADDITIONAL SECTION: ANSWER SECTION AUTHORITY SECTION RR A RR, AAAA RR ;; Query time: 100 msec ;; WHEN: Wed Jun 23 19:18:52 2004 ;; MSG SIZE rcvd: 115 ;; Query time: DNS ;; SERVER: DNS ;; WHEN DNS date & time ;; MSG SIZE rcvd: DNS size (byte ) Note: IP TCP/UDP size 한국인터넷정보센터 9
IPv6 DNS AAAA RR IPv6 AAAA RR. dig domain_name AAAA C:\>dig www.krdnsv6.or.kr aaaa ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr aaaa ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1800 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1800 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1800 IN NS ns1.nic.or.kr. ;; Query time: 130 msec ;; WHEN: Thu Jun 24 15:46:45 2004 ;; MSG SIZE rcvd: 103, www.krdnsv6.or.kr IPv6 "2001:dc5:a::100". NOTE! : DNS IP www.krdnsv6.or.kr IPv4, 'dig www.krdnsv6.or.kr A' www.krdnsv6.or.kr IPv6, 'dig www.krdnsv6.or.kr AAAA', IPv4 IPv6 IP A AAAA IPv6 AAAA DNS A DNS IP 한국인터넷정보센터 10
IPv6 IPv6 DNS IPv6 DNS IPv6 DNS., dig IPv6 DNS. dig @ipv6_address domain_name type dig @name_server_domain_name domain_name type, ipv6_address IPv6, name_server_domain_name IPv6. $ dig @2001:dc5:a::222 www.krdnsv6.or.kr aaaa ; <<>> DiG 9.2.2 <<>> @2001:dc5:a::222 www.krdnsv6.or.kr aaaa ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14793 ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1095 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1095 IN NS ns1.nic.or.kr. krdnsv6.or.kr. 1095 IN NS ns2.nic.or.kr. ;; Query time: 79 msec ;; SERVER: 2001:dc5:a::222#53(2001:dc5:a::222) ;; WHEN: Thu Jun 24 15:57:05 2004 ;; MSG SIZE rcvd: 103 $ dig @rec.test.kr. www.krdnsv6.or.kr aaaa ; <<>> DiG 9.2.2 <<>> @rec.test.kr. www.krdnsv6.or.kr aaaa ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49779 ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 888 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 888 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 888 IN NS ns1.nic.or.kr. ;; Query time: 16 msec ;; SERVER: 2001:dc5:a::222#53(rec.test.kr.) ;; WHEN: Thu Jun 24 16:00:32 2004 ;; MSG SIZE rcvd: 103 한국인터넷정보센터 11
NOTE! : IPv6 DNS Unix, Linux IPv6 Windows BIND DNS dig Windows OS IPv6 PC IPv6 DNS dig NOTE : KRDNSv6 (www.krdnsv6.or.kr) dig PC IPv6 DNS, IPv6 DNS dig 한국인터넷정보센터 12
3. dig dig dig. command line +[no]cmd : +cmd ( ) : +cmd, +nocmd, c:\>dig +cmd www.krdnsv6.or.kr. a ; <<>> DiG 9.2.3 <<>> +cmd www.krdnsv6.or.kr. a ;www.krdnsv6.or.kr. IN A www.krdnsv6.or.kr. 1789 IN A 202.31.190.100 krdnsv6.or.kr. 1789 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1789 IN NS ns1.nic.or.kr. ;; Query time: 90 msec ;; WHEN: Thu Jun 24 11:13:09 2004 ;; MSG SIZE rcvd: 91 c:\>dig +nocmd www.krdnsv6.or.kr. a ;www.krdnsv6.or.kr. IN A www.krdnsv6.or.kr. 1773 IN A 202.31.190.100 krdnsv6.or.kr. 1773 IN NS ns1.nic.or.kr. krdnsv6.or.kr. 1773 IN NS ns2.nic.or.kr. ;; Query time: 70 msec ;; WHEN: Thu Jun 24 11:13:26 2004 ;; MSG SIZE rcvd: 91 한국인터넷정보센터 13
comment line +[no]comments comment line "" : +comments : "+comments", "+nocomments", Note : "+nocomments" DNS Header c:\>dig +comments www.krdnsv6.or.kr. aaaa ; <<>> DiG 9.2.3 <<>> +comments www.krdnsv6.or.kr. aaaa ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1800 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1800 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1800 IN NS ns1.nic.or.kr. ;; Query time: 120 msec ;; WHEN: Thu Jun 24 11:20:45 2004 ;; MSG SIZE rcvd: 103 c:\>dig +nocomments www.krdnsv6.or.kr. aaaa ; <<>> DiG 9.2.3 <<>> +nocomments www.krdnsv6.or.kr. aaaa ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1794 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1794 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1794 IN NS ns1.nic.or.kr. ;; Query time: 40 msec ;; WHEN: Thu Jun 24 11:20:51 2004 ;; MSG SIZE rcvd: 103 한국인터넷정보센터 14
+[no]question +[no]answer +[no]authority +[no]additional :, DNS Question, Answer, Authority, Additional Section : +question +answer +authority +additional c:\>dig www.krdnsv6.or.kr. aaaa ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1368 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1368 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1368 IN NS ns1.nic.or.kr. ;; Query time: 120 msec ;; WHEN: Thu Jun 24 11:27:57 2004 ;; MSG SIZE rcvd: 103 c:\>dig www.krdnsv6.or.kr. aaaa +noquestion ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa +noquestion www.krdnsv6.or.kr. 1333 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1333 IN NS ns1.nic.or.kr. krdnsv6.or.kr. 1333 IN NS ns2.nic.or.kr. ;; Query time: 100 msec ;; WHEN: Thu Jun 24 11:28:32 2004 ;; MSG SIZE rcvd: 103 c:\>dig www.krdnsv6.or.kr. aaaa +noquestion +noanswer +noauthority +noadditional ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa +noquestion +noanswer +noauthority +noadditional ;; Query time: 60 msec ;; WHEN: Thu Jun 24 11:29:36 2004 ;; MSG SIZE rcvd: 103 한국인터넷정보센터 15
DNS DNS +[no]stats : +stats :, c:\>dig www.krdnsv6.or.kr. aaaa ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1177 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1177 IN NS ns1.nic.or.kr. krdnsv6.or.kr. 1177 IN NS ns2.nic.or.kr. ;; Query time: 140 msec ;; WHEN: Thu Jun 24 11:31:09 2004 ;; MSG SIZE rcvd: 103 c:\>dig www.krdnsv6.or.kr. aaaa +nostats ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa +nostats ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1170 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1170 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1170 IN NS ns1.nic.or.kr. 한국인터넷정보센터 16
DNS +[no]short : +noshort :, c:\>dig www.krdnsv6.or.kr. aaaa ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1046 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1046 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1046 IN NS ns1.nic.or.kr. ;; Query time: 110 msec ;; WHEN: Thu Jun 24 11:33:20 2004 ;; MSG SIZE rcvd: 103 c:\>dig www.krdnsv6.or.kr. aaaa +short 2001:dc5:a::100 DNS +short +identity : +short +noidentity :, c:\>dig www.krdnsv6.or.kr. aaaa +short 2001:dc5:a::100 c:\>dig www.krdnsv6.or.kr. aaaa +short +identity 2001:dc5:a::100 from server 202.31.190.222 in 10 ms. 한국인터넷정보센터 17
+[no]qr DNS Question Section : +noqr :, c:\>dig www.krdnsv6.or.kr. aaaa ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 887 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 887 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 887 IN NS ns1.nic.or.kr. ;; Query time: 90 msec ;; WHEN: Thu Jun 24 11:35:59 2004 ;; MSG SIZE rcvd: 103 c:\>dig www.krdnsv6.or.kr. aaaa +qr ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa +qr ;; Sending: ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;www.krdnsv6.or.kr. IN AAAA ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 884 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 884 IN NS ns1.nic.or.kr. krdnsv6.or.kr. 884 IN NS ns2.nic.or.kr. ;; Query time: 80 msec ;; WHEN: Thu Jun 24 11:36:02 2004 ;; MSG SIZE rcvd: 103 한국인터넷정보센터 18
DNS (Resource Record) +[no]multiline : +nomultiline :, Note : SOA RR c:\>dig krdnsv6.or.kr. soa ; <<>> DiG 9.2.3 <<>> krdnsv6.or.kr. soa ;krdnsv6.or.kr. IN SOA krdnsv6.or.kr. 1800 IN SOA ns1.krnic.net. root.ns1.nic.or.kr. 2004052518 3600 300 3600000 1800 krdnsv6.or.kr. 1800 IN NS ns1.nic.or.kr. krdnsv6.or.kr. 1800 IN NS ns2.nic.or.kr. ;; Query time: 170 msec ;; WHEN: Thu Jun 24 11:46:05 2004 ;; MSG SIZE rcvd: 125 c:\>dig krdnsv6.or.kr. soa +multiline ; <<>> DiG 9.2.3 <<>> krdnsv6.or.kr. soa +multiline ;krdnsv6.or.kr. IN SOA krdnsv6.or.kr. 1796 IN SOA ns1.krnic.net. root.ns1.nic.or.kr. ( 2004052518 ; serial 3600 ; refresh (1 hour) 300 ; retry (5 minutes) 3600000 ; expire (5 weeks 6 days 16 hours) 1800 ; minimum (30 minutes) ) krdnsv6.or.kr. krdnsv6.or.kr. 1796 IN NS ns1.nic.or.kr. 1796 IN NS ns2.nic.or.kr. ;; Query time: 150 msec ;; WHEN: Thu Jun 24 11:46:09 2004 ;; MSG SIZE rcvd: 125 한국인터넷정보센터 19
dig DNS TCP/UDP DNS TCP 53, UDP 53 DNS. DNS UDP 53. TCP 53 DNS UDP DNS 512 TCP 53. TCP 53 DNS. (zone transfer), TCP 53. DNS, UDP 53 TCP 53 DNS. 한국인터넷정보센터 20
+[no]vc +[no]tcp Note DNS TCP '+[no]vc' '+[no]tcp' : +novc, +notcp :, : TCP c:\>dig www.krdnsv6.or.kr. aaaa +vc ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa +vc ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1800 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1800 IN NS ns1.nic.or.kr. krdnsv6.or.kr. 1800 IN NS ns2.nic.or.kr. ;; Query time: 130 msec ;; WHEN: Thu Jun 24 11:54:33 2004 ;; MSG SIZE rcvd: 103 c:\>dig www.krdnsv6.or.kr. aaaa +tcp ; <<>> DiG 9.2.3 <<>> www.krdnsv6.or.kr. aaaa +tcp ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1778 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1778 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1778 IN NS ns1.nic.or.kr. ;; Query time: 120 msec ;; WHEN: Thu Jun 24 11:54:54 2004 ;; MSG SIZE rcvd: 103 한국인터넷정보센터 21
dig DNS IP CASE 1 : DNS IPv6 IP IPv6 IPv4 IPv6 IPv4/IPv6., Global Unicast IPv6. DNS IPv6 IP. IPv6, IPv6 DNS. dig IP multi-homed DNS IP. CASE 2 : (zone transfer) IP, 2 IP (zone transfer), IP IP., allow-transfer IP, (zone transfer) DNS IP IP., dig IP (zone transfer). 한국인터넷정보센터 22
DNS IP -b ip_address : ip_address IP : +novc, +notcp :, Note : IP % dig @2001:dc5:a::222 -b 2001:dc5:a:0:203:baff:fe67:f795 www.krdnsv6.or.kr aaaa ; <<>> DiG 9.2.2 <<>> @2001:dc5:a::222 -b 2001:dc5:a:0:203:baff:fe67:f795 www.krdnsv6.or.kr aaaa ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17001 ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1800 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1800 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1800 IN NS ns1.nic.or.kr. ;; Query time: 23 msec ;; SERVER: 2001:dc5:a::222#53(2001:dc5:a::222) ;; WHEN: Thu Jun 24 12:27:31 2004 ;; MSG SIZE rcvd: 103 % dig @2001:dc5:a::222 -b 2001:dc5:a::200 www.krdnsv6.or.kr aaaa ; <<>> DiG 9.2.2 <<>> @2001:dc5:a::222 -b 2001:dc5:a::200 www.krdnsv6.or.kr aaaa ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65004 ;www.krdnsv6.or.kr. IN AAAA www.krdnsv6.or.kr. 1788 IN AAAA 2001:dc5:a::100 krdnsv6.or.kr. 1788 IN NS ns2.nic.or.kr. krdnsv6.or.kr. 1788 IN NS ns1.nic.or.kr. ;; Query time: 2 msec ;; SERVER: 2001:dc5:a::222#53(2001:dc5:a::222) ;; WHEN: Thu Jun 24 12:27:43 2004 ;; MSG SIZE rcvd: 103 한국인터넷정보센터 23
IXFR(Incremental Zone Transfer) DNS (zone transfer) AXFR (transfer of an entire zone). AXFR (zone transfer). IXFR(Incremental Zone Transfer).. DNS IXFR., Dynamic Update. QType(DNS ) IXFR dig. RFC: RFC1995, "Incremental Zone Transfer in DNS" NOTE! : IXFR dynamic update BIND DNS, IXFR (zone transfer) AXFR. 한국인터넷정보센터 24
QType IXFR serial_number ixfr=serial_number type IXFR :, c:\>dig @202.31.190.200 dns.test.kr. axfr ; <<>> DiG 9.2.3 <<>> @202.31.190.200 dns.test.kr. axfr dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052419 180 180 604800 180 dns.test.kr. 180 IN NS ns1.dns.test.kr. dns.test.kr. 180 IN NS ns2.dns.test.kr. justin01.dns.test.kr. 180 IN A 203.255.208.31 justin01.dns.test.kr. 180 IN AAAA 2002:abcd:3456::abcd:3456 www.ngix.dns.test.kr. 60 IN A 203.254.33.19 www.ngix.dns.test.kr. 60 IN AAAA 2001:2b8:1::19 ns1.dns.test.kr. 180 IN A 202.31.190.200 ns1.dns.test.kr. 180 IN AAAA 2001:dc5:a::200 ns2.dns.test.kr. 180 IN A 202.31.190.210 ns2.dns.test.kr. 180 IN AAAA 2001:dc5:a::210 test001.dns.test.kr. 180 IN A 211.202.78.8 www.vsix.dns.test.kr. 60 IN CNAME www2.vsix.dns.test.kr. www2.vsix.dns.test.kr. 60 IN A 203.254.33.100 www2.vsix.dns.test.kr. 60 IN AAAA 2001:2b8:1::100 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052419 180 180 604800 180 ;; Query time: 100 msec ;; SERVER: 202.31.190.200#53(202.31.190.200) ;; WHEN: Thu Jun 24 13:01:17 2004 ;; XFR size: 16 records c:\>dig @202.31.190.200 dns.test.kr. ixfr=2004052415 ; <<>> DiG 9.2.3 <<>> @202.31.190.200 dns.test.kr. ixfr=2004052415 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052419 180 180 604800 180 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052415 180 180 604800 180 justin01.dns.test.kr. 180 IN AAAA 2002:abcd:3456::abcd:3456 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052416 180 180 604800 180 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052416 180 180 604800 180 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052417 180 180 604800 180 justin01.dns.test.kr. 180 IN AAAA 2002:abcd:3456::abcd:3456 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052417 180 180 604800 180 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052418 180 180 604800 180 justin002.dns.test.kr. 60 IN A 10.0.0.1 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052418 180 180 604800 180 justin002.dns.test.kr. 60 IN A 10.0.0.1 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052419 180 180 604800 180 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. 2004052419 180 180 604800 180 ;; Query time: 120 msec ;; SERVER: 202.31.190.200#53(202.31.190.200) ;; WHEN: Thu Jun 24 13:11:32 2004 ;; XFR size: 14 records, serial number 2004052415 serial number serial number /. 한국인터넷정보센터 25
AXFR AXFR(transfer of an entire zone) (zone). DNS, (zone transfer) AXFR DNS. AXFR RFC1035 "DOMAIN NAMES - IMPLEMENTATION AND SPECIFICATION" DNS. AXFR TCP 53 RR. dig (zone). dig @server domain_zone_name AXFR server domain_zone_name AXFR domain_zone_name, zone transfer, (zone) SOA RR transfer of an entire zone.,.,, dig., (zone transfer). (zone). SOA. 한국인터넷정보센터 26
: SOA RR NS RR c:\>dig dns.test.kr. soa +multiline ; <<>> DiG 9.2.3 <<>> dns.test.kr. soa +multiline ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4 ;dns.test.kr. IN SOA dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. ( 2004052419 ; serial 180 ; refresh (3 minutes) 180 ; retry (3 minutes) 604800 ; expire (1 week) 180 ; minimum (3 minutes) ) dns.test.kr. dns.test.kr. 180 IN NS ns2.dns.test.kr. 180 IN NS ns1.dns.test.kr. ;; ADDITIONAL SECTION: ns1.dns.test.kr. 180 IN A 202.31.190.200 ns1.dns.test.kr. 180 IN AAAA 2001:dc5:a::200 ns2.dns.test.kr. 180 IN A 202.31.190.210 ns2.dns.test.kr. 180 IN AAAA 2001:dc5:a::210 ;; Query time: 140 msec ;; WHEN: Fri Jun 25 12:10:21 2004 ;; MSG SIZE rcvd: 195, DNS.TEST.KR. SOA RR MNAME "ns1.dns.test.kr.". DNS.TEST.KR. NS RR "ns1.dns.test.kr." "ns2.dns.test.kr." DNS.TEST.KR. (zone). SOA RR MNAME "ns1.dns.test.kr.". "ns2.dns.test.kr.". server dig AXFR. 한국인터넷정보센터 27
: (zone) RR, +multiline c:\>dig @ns1.dns.test.kr. dns.test.kr. axfr +multiline ; <<>> DiG 9.2.3 <<>> @ns1.dns.test.kr. dns.test.kr. axfr +multiline dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. ( 2004052419 ; serial 180 ; refresh (3 minutes) 180 ; retry (3 minutes) 604800 ; expire (1 week) 180 ; minimum (3 minutes) ) dns.test.kr. 180 IN NS ns1.dns.test.kr. dns.test.kr. 180 IN NS ns2.dns.test.kr. justin01.dns.test.kr. 180 IN A 203.255.208.31 justin01.dns.test.kr. 180 IN AAAA 2002:abcd:3456::abcd:3456 www.ngix.dns.test.kr. 60 IN A 203.254.33.19 www.ngix.dns.test.kr. 60 IN AAAA 2001:2b8:1::19 ns1.dns.test.kr. 180 IN A 202.31.190.200 ns1.dns.test.kr. 180 IN AAAA 2001:dc5:a::200 ns2.dns.test.kr. 180 IN A 202.31.190.210 ns2.dns.test.kr. 180 IN AAAA 2001:dc5:a::210 test001.dns.test.kr. 180 IN A 211.202.78.8 www.vsix.dns.test.kr. 60 IN CNAME www2.vsix.dns.test.kr. www2.vsix.dns.test.kr. 60 IN A 203.254.33.100 www2.vsix.dns.test.kr. 60 IN AAAA 2001:2b8:1::100 dns.test.kr. 180 IN SOA ns1.dns.test.kr. admin.dns.test.kr. ( 2004052419 ; serial 180 ; refresh (3 minutes) 180 ; retry (3 minutes) 604800 ; expire (1 week) 180 ; minimum (3 minutes) ) ;; Query time: 160 msec ;; SERVER: 202.31.190.200#53(ns1.dns.test.kr.) ;; WHEN: Fri Jun 25 12:10:39 2004 ;; XFR size: 16 records.. SOA RR SOA RR DNS.TEST.KR. NS RR IP, ns1.dns.test.kr. ns2.dns.test.kr. A RR AAAA RR DNS.TEST.KR, SOA RR NMAE Serial number AXFR SOA RR DNS (zone), RR (zone) SOA RR SOA RR dig (zone) comment (;) 한국인터넷정보센터 28
comment.. root.cache root.hint.. dig @a.root-servers.net.. NS > root.cache. dig. dig comment (;),.. 한국인터넷정보센터 29
c:\>dig @a.root-servers.net.. NS > root.cache c:\>more root.cache ; <<>> DiG 9.2.3 <<>> @a.root-servers.net.. NS ;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 13 ;. IN NS. 518400 IN NS A.ROOT-SERVERS.NET.. 518400 IN NS H.ROOT-SERVERS.NET.. 518400 IN NS C.ROOT-SERVERS.NET.. 518400 IN NS G.ROOT-SERVERS.NET.. 518400 IN NS F.ROOT-SERVERS.NET.. 518400 IN NS B.ROOT-SERVERS.NET.. 518400 IN NS J.ROOT-SERVERS.NET.. 518400 IN NS K.ROOT-SERVERS.NET.. 518400 IN NS L.ROOT-SERVERS.NET.. 518400 IN NS M.ROOT-SERVERS.NET.. 518400 IN NS I.ROOT-SERVERS.NET.. 518400 IN NS E.ROOT-SERVERS.NET.. 518400 IN NS D.ROOT-SERVERS.NET. ;; ADDITIONAL SECTION: A.ROOT-SERVERS.NET. 3600000 IN A 198.41.0.4 H.ROOT-SERVERS.NET. 3600000 IN A 128.63.2.53 C.ROOT-SERVERS.NET. 3600000 IN A 192.33.4.12 G.ROOT-SERVERS.NET. 3600000 IN A 192.112.36.4 F.ROOT-SERVERS.NET. 3600000 IN A 192.5.5.241 B.ROOT-SERVERS.NET. 3600000 IN A 192.228.79.201 J.ROOT-SERVERS.NET. 3600000 IN A 192.58.128.30 K.ROOT-SERVERS.NET. 3600000 IN A 193.0.14.129 L.ROOT-SERVERS.NET. 3600000 IN A 198.32.64.12 M.ROOT-SERVERS.NET. 3600000 IN A 202.12.27.33 I.ROOT-SERVERS.NET. 3600000 IN A 192.36.148.17 E.ROOT-SERVERS.NET. 3600000 IN A 192.203.230.10 D.ROOT-SERVERS.NET. 3600000 IN A 128.8.10.90 ;; Query time: 220 msec ;; SERVER: 198.41.0.4#53(a.root-servers.net.) ;; WHEN: Fri Jun 25 12:35:15 2004 ;; MSG SIZE rcvd: 436 한국인터넷정보센터 30
EDNS0 EDNS0 DNS RR., DNS UDP, DNS 512. DNS, 512 DNS, DNS Header flag TC(Truncation) 1. 512. TC DNS DNS TCP 53. 512 UDP DNS. EDNS0 buffer size. buufer size 512, 1024 byte, 2048 byte, 512 DNS UDP. dig. dig @server domain_name type +bufsize=size : dig @202.31.190.222 www.dns.test.kr AAAA +bufsize=2048 NOTE : EDNS0 ENDS0, EDNS0 DNS, dig EDNS0 EDNS0 IPv6 DNS, DNSSEC DNS 한국인터넷정보센터 31
4. dig BIND DNS dig dig BIND DNS. BIND DNS ISC(Internet System Consortium). ISC ISC FTP BIND DNS 8 BIND DNS 9 Windows BIND DNS http://www.isc.org ftp://ftp.isc.org/isc/bind/ ftp://ftp.isc.org/isc/bind9/ ftp://ftp.isc.org/isc/bind/contrib/ Unix Linux BIND DNS dig. dig '/usr/local/bin'. Windows OS BIND DNS dig. Unix dig dig DNS ' '. dig. /etc/resolv.conf dig '@server', /etc/resolv.conf nameserver IP DNS. /etc/hosts dig '@server' IP, dig 'server' OS IP. 한국인터넷정보센터 32
, dig '@server' DNS IP. /etc/hosts, 'dig @krdns www.krdnsv6.or.kr.', dig 'krdns' IP '202.31.190.222' DNS. $ cat /etc/hosts # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 192.0.2.100 test-pc.krdnsv6.or.kr. 202.31.190.222 krdns Linux /etc/hosts IPv6 v6dns, 'dig @v6dns www.krdnsv6.or.kr' "2001:dc5:a::222" DNS. $ cat /etc/hosts # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 192.0.2.100 test-pc.krdnsv6.or.kr. 2001:dc5:a::222 v6dns Linux IPv6 Linux OS /etc/hosts IPv6. Windows dig ISC Windows. BIND DNS Windows. BIND DNS BINDInstall.exe. Windows BIND DNS. dig BIND DNS 한국인터넷정보센터 33
dig. BIND DNS "C:\bind", PC " " -> " " " " -> " " -> " ". " " " " "Path" " " "Path" ";C:\bind". "C:\WINNT\SYSTEM32\DRIVERS\ETC" resolv.conf,. resolv.conf IP. namserver 192.0.2.222 NOTE : Windows hosts, resolv.conf, services Windows NT, Windows 2000, Windows XP, Windows 2003 Windows OS Unix Linux /etc hosts, resolv.conf, services, networks, protocols "C:\WINNT\SYSTEM32\DRIVERS\ETC". OS "C:\WINDOWS\SYSTEM32\DRIVERS\ETC". BIND DNS. NOTE! : BIND DNS Windows OS IPv6 Windows XP, Windows 2003 IPv6 OS Windows 2000, "Microsoft IPv6 Technology Preview for Windows 2000" IPv6 BIND DNS Windows OS IPv6 BIND DNS dig IPv6 DNS Windows "dig @2001:dc5:a::222 www.krdnsv6.or.kr AAAA" 한국인터넷정보센터 34