Force TCP and show remaining TTL

More dig commands

• Clean answer-only output
  dig +noall +answer example.comcopy

  Strip headers/stats; show only the answer section for scripting/diffs

• Find authoritative nameservers via NS chase
  dig +nssearch example.comcopy

  Query each authoritative NS directly; reveals SOA serial mismatches between them

• Attempt a zone transfer (AXFR)
  dig axfr @ns1.example.com example.comcopy

  Dump full zone if AXFR is open; note: success on public NS is a misconfig

• Validate DNSSEC chain with RRSIG
  dig +dnssec +multi example.com @1.1.1.1copy

  Show RRSIG records; check AD flag in flags line for validated answer

• Trace delegation without DNSSEC noise
  dig +trace +nodnssec example.comcopy

  Follow delegation from root to authoritative, hiding RRSIG/DS clutter

all 11 dig commands →