Resolve SRV records for service discovery

More dig commands

• Force TCP and show remaining TTL
  dig +tcp +ttlunits +noall +answer example.com @8.8.8.8copy

  Test TCP/53 reachability; +ttlunits prints TTL as 1h/30m not raw seconds

• Clean answer-only output
  dig +noall +answer example.comcopy

  Strip headers/stats; show only the answer section for scripting/diffs

• Find authoritative nameservers via NS chase
  dig +nssearch example.comcopy

  Query each authoritative NS directly; reveals SOA serial mismatches between them

• Attempt a zone transfer (AXFR)
  dig axfr @ns1.example.com example.comcopy

  Dump full zone if AXFR is open; note: success on public NS is a misconfig

• Validate DNSSEC chain with RRSIG
  dig +dnssec +multi example.com @1.1.1.1copy

  Show RRSIG records; check AD flag in flags line for validated answer

all 11 dig commands →