Force TCP and show remaining TTL dig
Test TCP/53 reachability; +ttlunits prints TTL as 1h/30m not raw seconds
dig +tcp +ttlunits +noall +answer example.com @8.8.8.8
more dig
all 11 commands →
Clean answer-only output
dig +noall +answer example.com
Find authoritative nameservers via NS chase
dig +nssearch example.com
Attempt a zone transfer (AXFR)
dig axfr @ns1.example.com example.com
Validate DNSSEC chain with RRSIG
dig +dnssec +multi example.com @1.1.1.1
Trace delegation without DNSSEC noise
dig +trace +nodnssec example.com