Skip to content

Instantly share code, notes, and snippets.

mnordhoff@clover:~$ dig +dnssec +norecurse +nsid arpa @e.root-servers.net
; <<>> DiG 9.15.7-Ubuntu <<>> +dnssec +norecurse +nsid arpa @e.root-servers.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57293
;; flags: qr aa; QUERY: 1, ANSWER: 0, AUTHORITY: 6, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
$ dig +dnssec +norecurse @ns-1913.awsdns-47.co.uk. migoinc-shared.com dnskey
; <<>> DiG 9.17.8-1+ubuntu16.04.1+isc+2-Ubuntu <<>> +dnssec +norecurse @ns-1913.awsdns-47.co.uk. migoinc-shared.com dnskey
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29607
;; flags: qr aa ad; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
$ dig +dnssec im ds @one.one.one.one
; <<>> DiG 9.17.17-2+ubuntu20.04.1+isc+1-Ubuntu <<>> +dnssec im ds @one.one.one.one
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64209
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 4, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 1232
$ dig +dnssec +norecruse +nsid bet soa @65.22.36.17
; <<>> DiG 9.17.20-1+ubuntu20.04.1+isc+2-Ubuntu <<>> +dnssec +norecurse +nsid bet soa @65.22.36.17
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33225
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 5, ADDITIONAL: 9
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
Thu 07 Apr 2022 06:32:36 PM UTC
dig +dnssec response sizes for every TLD. PowerDNS Recursor.
Some are NODATA. One (xn--mgbai9azgqp6j) was probably SERVFAIL.
1 46
2 75
2 76
2 78
mnordhoff@ultimate:~$ for i in 139.162.130.5 139.162.131.5 139.162.132.5 139.162.133.5 139.162.134.5 139.162.135.5 139.162.136.5 139.162.137.5 139.162.138.5 139.162.139.5 2a01:7e01::5 2a01:7e01::9 2a01:7e01::7 2a01:7e01::c 2a01:7e01::2 2a01:7e01::4 2a01:7e01::3 2a01:7e01::6 2a01:7e01::b 2a01:7e01::8; do echo $i; dig +vc +timeout=2 +tries=2 example.com @$i; done
139.162.130.5
;; Connection to 139.162.130.5#53(139.162.130.5) for example.com failed: timed out.
;; Connection to 139.162.130.5#53(139.162.130.5) for example.com failed: timed out.
139.162.131.5
;; Connection to 139.162.131.5#53(139.162.131.5) for example.com failed: timed out.
;; Connection to 139.162.131.5#53(139.162.131.5) for example.com failed: timed out.
139.162.132.5
; <<>> DiG 9.19.2-1+ubuntu20.04.1+isc+1-Ubuntu <<>> +vc +timeout +tries example.com @139.162.132.5
$ dig @e.fi -4 +dnssec +norecurse +nsid fi soa
; <<>> DiG 9.19.4-1+ubuntu20.04.1+isc+1-Ubuntu <<>> @e.fi -4 +dnssec +norecurse +nsid fi soa
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20518
;; flags: qr aa; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
$ mtr -brwz d0.org.afilias-nst.org
Start: 2022-09-07T01:55:07+0000
HOST: ultimate Loss% Snt Last Avg Best Wrst StDev
1. AS63949 2600:3c02::1 0.0% 10 0.6 0.8 0.5 2.1 0.5
2. AS63949 2600:3c0f:4:35::3 0.0% 10 0.4 0.6 0.4 1.7 0.4
3. AS??? fd04:1:1eaf:3:1::1 0.0% 10 3.4 2.6 0.6 9.7 2.9
4. AS??? fd04:1:b:2:1::2 0.0% 10 0.5 1.6 0.4 10.3 3.1
5. AS20940 ae45.r12.atl01.ien.netarch.akamai.com (2600:1488:a1c0::18) 0.0% 10 0.5 1.1 0.5 3.6 1.1
6. AS20940 ae8.r02.atl01.icn.netarch.akamai.com (2600:1488:a1c0:405::a) 0.0% 10 0.6 0.8 0.6 1.6 0.3
7. AS20940 ae10.r01.dfw01.icn.netarch.akamai.com (2600:1488:5fc3:52::a) 0.0% 10 65.7 46.4 19.0 137.2 36.7
$ dig +dnssec +norecurse +nsid @c.in-addr-servers.arpa 74.in-addr.arpa
; <<>> DiG 9.19.10-1+ubuntu20.04.1+isc+2-Ubuntu <<>> +dnssec +norecurse +nsid @c.in-addr-servers.arpa 74.in-addr.arpa
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56431
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
$ dig +dnssec +norecurse @av2.nstld.com blog.verisign.com
; <<>> DiG 9.19.13-1+ubuntu20.04.1+isc+1-Ubuntu <<>> +dnssec +norecurse @av2.nstld.com blog.verisign.com
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27084
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 5, ADDITIONAL: 7
;; OPT PSEUDOSECTION: