dig

Query DNS

$ dig [example.com]

$ dig [example.com] [A]

$ dig [example.com] +short

$ dig -x [8.8.8.8]

$ dig [@8.8.8.8] [example.com]

dig [@server] [name] [type]

dig (Domain Information Groper) is a DNS lookup utility. It queries DNS servers for various record types, provides detailed responses, and is the preferred tool for DNS troubleshooting and analysis.
The command has largely replaced older tools like nslookup.

@server

Query specific DNS server

Brief output (just answer)

Show only answer section

Reverse lookup

Record type (A, AAAA, MX, NS, etc.)

Trace DNS delegation path

Request DNSSEC records

Use IPv4 / IPv6 only

A

IPv4 address

IPv6 address

Mail exchange

Name servers

Text records

Canonical name (alias)

Start of authority

Reverse lookup pointer

Service locator

All available records

Common public DNS:
- 8.8.8.8 - Google DNS
- 1.1.1.1 - Cloudflare DNS
- 9.9.9.9 - Quad9

QUESTION - Query sent
ANSWER - Response records
AUTHORITY - Authoritative nameservers
ADDITIONAL - Additional information

Requires network connectivity. Default uses system DNS. Complex output for beginners. Some ISPs intercept DNS. DNSSEC validation requires proper setup. Large queries may timeout.

dig was developed by Steve Hotz at USC's Information Sciences Institute in 1989, becoming part of BIND and the standard DNS debugging tool.

host(1), nslookup(1), drill(1)