ldns-revoke – sets the revoke bit of a DNSKEY Synopsisldns-revoke file Descriptionldns-revoke is used to revoke a public DNSKEY RR. When run it will read file with a DNSKEY RR in it, sets the revoke bit and write back the output to file . Options-n Write the result to stdout instead of a file AuthorWritten…
ldns-resolver – tries to create a resolver from a resolv.conf file. Synopsisldns-resolver file Descriptionldns-resolver tries to create a resolver from a resolv.conf file. This is only useful to test the library for robusteness with input data. Optionsldns-resolver takes a filename of the resolv.conf file as input. For example ldns-resolver /etc/resolv.conf will show if the file…
ldns-read-zone – read a zonefile and print it Synopsisldns-read-zone ZONEFILE Descriptionldns-read-zone reads a DNS zone file and prints it. The output has 1 resource record per line, and no pretty-printing makeup. Options-c Canonicalize all resource records in the zone before printing -d Only print DNSSEC data from the zone. This option skips every record that…
ldns-nsec3-hash – print out the NSEC3 hash for a domain name Synopsisldns-nsec3-hash <domain_name> Descriptionldns-nsec3-hash is used to print out the NSEC3 hash for the given domain name. Options-a number Use the given algorithm number for the hash calculation. Defaults to 1 (SHA-1). -s salt Use the given salt for the hash calculation. Salt value should…
ldns-notify – notify DNS servers that updates are available Synopsisldns-notify [options] -z zone servers Descriptionldns-notify sends a NOTIFY message to DNS servers. This tells them that an updated zone is available at the master servers. It can perform TSIG signatures and it can add a SOA serial number of the updated zone. If a server…
ldns-mx – print out the mx record(s) for a domain Synopsisldns-mx DOMAIN Descriptionldns-mx is used to print out mx information of a domain. Optionsldns-mx has no options. AuthorWritten by the ldns team as an example for ldns usage. Reporting BugsReport bugs to <ldns-team [at] nlnetlabs.nl>. CopyrightCopyright (C) 2005 NLnet Labs. This is free software. There…
ldns-keygen – generate a DNSSEC key pair Synopsisldns-keygen [ OPTION ] DOMAIN Descriptionldns-keygen is used to generate a private/public keypair. When run, it will create 3 files; a .key file with the public DNSKEY, a .private file with the private keydata and a .ds with the DS record of the DNSKEY record. ldns-keygen can also…
ldns-keyfetcher – retrieve the DNSSEC DNSKEYs for a zone Synopsisldns-keyfetcher [ OPTIONS ] DOMAIN Descriptionldns-keyfetcher is used to retrieve the DNSKEYs of a zone. First it finds all authoritative nameservers of the zone by tracing it from the root down. All authoritative nameservers are then queried (using TCP) for the DNSKEY RRset of the zone…
ldns-key2ds – transform a DNSKEY RR to a DS RR Synopsisldns-key2ds file Descriptionldns-key2ds is used to transform a public DNSKEY RR to a DS RR. When run it will read file with a DNSKEY RR in it and it will create a .ds file with the DS RR in it. It prints out the basename…
ldns-gen-zone – read a zonefile and print it while adding DS records and extra RR’s Synopsisldns-gen-zone ZONEFILE Descriptionldns-gen-zone reads a DNS zone file and prints it. It is build for speed, not for a nice formatting. The output has one resource record per line and no pretty-printing makeup. DNSSEC data (NSEC, NSEC3, RRSIG or DNSKEY)…
dpa – DNS Packet Analyzer. Analyze DNS packets in ip trace files Synopsisdpa [ OPTION ] TRACEFILE Descriptiondpa is used to analyze dns packets in trace files. It has 3 main options: count, filter, and count uniques (i.e. count all different occurences). Options-c expressionlist Count occurrences of matching expressions -f expression Filter: only process packets…
ldns-dane – verify or create TLS authentication with DANE (RFC6698) Synopsisldns-dane [OPTIONS] verify name port ldns-dane [OPTIONS] -t tlsafile verify ldns-dane [OPTIONS] name port create [ Certificate-usage [ Selector [ Matching-type ] ] ] ldns-dane -h ldns-dane -v DescriptionIn the first form: A TLS connection to name:port is established. The TLSA resource record(s) for name…
ldns-config – show compiler and linker flags for ldns usage. Synopsisldns-config [ OPTIONS ] DescriptionWhen writing programs using ldns, you have to tell the compiler where to look for include files and what libraries from which location to link to. ldns-config can be used to find out what flags to use with the C compiler…
ldns-compare-zones – read and compare two zonefiles and print differences Synopsisldns-compare-zones [-c] [-i] [-d] [-z] [-s] ZONEFILE1 ZONEFILE2 Descriptionldns-compare-zones reads two DNS zone files and prints number of differences. Output is formated to: +NUM_INS -NUM_DEL ~NUM_CHGThe major comparison is based on the owner name. If an owner name is present in zonefile 1, but not…
ldns-chaos – give some information about a nameserver Synopsisldns-chaos NAMESERVER Descriptionldns-chaos retrieves all the addresses of the nameserver and then queries each address for its version.bind and hostname.bind. ldns-chaos is a bit more complex than ldns-mx. Optionsldns-chaos has no options. AuthorWritten by the ldns team as an example for ldns usage. Reporting BugsReport bugs to…
ldmtool – A tool to manage Microsoft Windows dynamic disks Synopsis ldmtool [options] ldmtool [options] scan [device…] ldmtool [options] show diskgroup {disk group GUID} ldmtool [options] show {volume | partition | disk} {disk group GUID} {object name} ldmtool [options] {create | remove} all ldmtool [options] {create | remove} volume {disk group GUID} {volume name}Options-d|–device device…
ldif – manipulates an LDIF stream by adding a column with the defined attribute type Synopsisldif [-b] attrtype DescriptionManipulates an LDIF stream by adding a column with the defined attribute type OptionsA summary of options is included below: -b Output base64 binary formatUsageldif dn < /tmp/ldif Authorldif was written by the 389 Project. Reporting BugsReport…
ldd – print shared object dependencies Synopsisldd [option]… file… Descriptionldd prints the shared objects (shared libraries) required by each program or shared object specified on the command line. An example of its use and output (using sed(1) to trim leading white space for readability in this page) is the following: $ ldd /bin/ls | sed…
ldclt – load test program for LDAP Synopsysldclt [-qQvV] [-E <max errors>] [-b <base DN>] [-h <host>] [-p <port>] [-t <timeout>] [-D <bind DN>] [-w <passwd>] [-o <SASL option>] [-e <execParams>] [-a <max pending>] [-n <nb threads>] [-i <nb times>] [-N <nb samples>] [-I <err number>] [-T <total>] [-r <low> -R <high>] [-f <filter>] [-s…
ldbsearch – Search for records in a LDB database Synopsis ldbsearch [-h] [-s base|one|sub] [-b basedn] [-i] [-H LDB-URL] [expression] [attributes]Descriptionldbsearch searches a LDB database for records matching the specified expression (see the ldapsearch(1) manpage for a description of the expression format). For each record, the specified attributes are printed. Options-h Show list of available…