NAME ldns-testns – simple fake nameserver tool SYNOPSYS ldns-testns [ OPTION ] datafile DESCRIPTION ldns-testns can be used to provide answers to DNS queries for testing. The answers are premade, and can be tailored to testing needs. The answers can be wildly invalid or unparseable. This program is a debugging aid. It is not efficient,…
NAME ldns-test-edns – test if dns cache supports EDNS and DNSSEC. SYNOPSIS ldns-test-edns [ -i ] { ip } DESCRIPTION ldns-test-edns tests a DNS cache and checks if it supports EDNS0 and DNSSEC types so that it can be used as a dnssec-enabled DNS cache. It sends two queries to the cache, one for the…
NAME ldns-signzone – sign a zonefile with DNSSEC data SYNOPSIS ldns-signzone [ OPTIONS ] ZONEFILE KEY [KEY [KEY] … ] DESCRIPTION ldns-signzone is used to generate a DNSSEC signed zone. When run it will create a new zonefile that contains RRSIG and NSEC resource records, as specified in RFC 4033, RFC 4034 and RFC 4035….
NAME ldns-rrsig – print out the inception and expiration dates in human readable form SYNOPSIS ldns-rrsig domain [ type ] DESCRIPTION ldns-rrsig is used to print the expiration and inception date of a RRSIG. The first argument is a domain name. ldns-rrsig will query the authoritative servers for that domain to get a list of…
NAME ldns-revoke – sets the revoke bit of a DNSKEY SYNOPSIS ldns-revoke file DESCRIPTION ldns-revoke is used to revoke a public DNSKEY RR. When run it will read file with a DNSKEY RR in it, sets the revoke bit and write back the output to file . OPTIONS -n Write the result to stdout instead…
NAME ldns-resolver – tries to create a resolver from a resolv.conf file. SYNOPSIS ldns-resolver file DESCRIPTION ldns-resolver tries to create a resolver from a resolv.conf file. This is only useful to test the library for robusteness with input data. OPTIONS ldns-resolver takes a filename of the resolv.conf file as input. For example ldns-resolver /etc/resolv.conf will…
NAME ldns-read-zone – read a zonefile and print it SYNOPSIS ldns-read-zone ZONEFILE DESCRIPTION ldns-read-zone reads a DNS zone file and prints it. The output has 1 resource record per line, and no pretty-printing makeup. OPTIONS -c Canonicalize all resource records in the zone before printing -d Only print DNSSEC data from the zone. This option…
NAME ldns-nsec3-hash – print out the NSEC3 hash for a domain name SYNOPSIS ldns-nsec3-hash <domain_name> DESCRIPTION ldns-nsec3-hash is used to print out the NSEC3 hash for the given domain name. OPTIONS -a number Use the given algorithm number for the hash calculation. Defaults to 1 (SHA-1). -s salt Use the given salt for the hash…
NAME ldns-notify – notify DNS servers that updates are available SYNOPSIS ldns-notify [options] -z zone servers DESCRIPTION ldns-notify sends a NOTIFY message to DNS servers. This tells them that an updated zone is available at the master servers. It can perform TSIG signatures and it can add a SOA serial number of the updated zone….
NAME ldns-mx – print out the mx record(s) for a domain SYNOPSIS ldns-mx DOMAIN DESCRIPTION ldns-mx is used to print out mx information of a domain. OPTIONS ldns-mx has no options. AUTHOR Written by the ldns team as an example for ldns usage. REPORTING BUGS Report bugs to <ldns-team [at] nlnetlabs.nl>. COPYRIGHT Copyright (C) 2005…
NAME ldns-keygen – generate a DNSSEC key pair SYNOPSIS ldns-keygen [ OPTION ] DOMAIN DESCRIPTION ldns-keygen is used to generate a private/public keypair. When run, it will create 3 files; a .key file with the public DNSKEY, a .private file with the private keydata and a .ds with the DS record of the DNSKEY record….
NAME ldns-keyfetcher – retrieve the DNSSEC DNSKEYs for a zone SYNOPSIS ldns-keyfetcher [ OPTIONS ] DOMAIN DESCRIPTION ldns-keyfetcher is used to retrieve the DNSKEYs of a zone. First it finds all authoritative nameservers of the zone by tracing it from the root down. All authoritative nameservers are then queried (using TCP) for the DNSKEY RRset…
NAME ldns-key2ds – transform a DNSKEY RR to a DS RR SYNOPSIS ldns-key2ds file DESCRIPTION ldns-key2ds is used to transform a public DNSKEY RR to a DS RR. When run it will read file with a DNSKEY RR in it and it will create a .ds file with the DS RR in it. It prints…
NAME ldns-gen-zone – read a zonefile and print it while adding DS records and extra RR’s SYNOPSIS ldns-gen-zone ZONEFILE DESCRIPTION ldns-gen-zone reads a DNS zone file and prints it. It is build for speed, not for a nice formatting. The output has one resource record per line and no pretty-printing makeup. DNSSEC data (NSEC, NSEC3,…
NAME dpa – DNS Packet Analyzer. Analyze DNS packets in ip trace files SYNOPSIS dpa [ OPTION ] TRACEFILE DESCRIPTION dpa is used to analyze dns packets in trace files. It has 3 main options: count, filter, and count uniques (i.e. count all different occurences). OPTIONS -c expressionlist Count occurrences of matching expressions -f expression…
NAME ldns-dane – verify or create TLS authentication with DANE (RFC6698) SYNOPSIS ldns-dane [OPTIONS] verify name port ldns-dane [OPTIONS] -t tlsafile verify ldns-dane [OPTIONS] name port create [ Certificate-usage [ Selector [ Matching-type ] ] ] ldns-dane -h ldns-dane -v DESCRIPTION In the first form: A TLS connection to name:port is established. The TLSA resource…
NAME ldns-config – show compiler and linker flags for ldns usage. SYNOPSIS ldns-config [ OPTIONS ] DESCRIPTION When writing programs using ldns, you have to tell the compiler where to look for include files and what libraries from which location to link to. ldns-config can be used to find out what flags to use with…
NAME ldns-compare-zones – read and compare two zonefiles and print differences SYNOPSIS ldns-compare-zones [-c] [-i] [-d] [-z] [-s] ZONEFILE1 ZONEFILE2 DESCRIPTION ldns-compare-zones reads two DNS zone files and prints number of differences. Output is formated to: +NUM_INS -NUM_DEL ~NUM_CHG The major comparison is based on the owner name. If an owner name is present in…
NAME ldns-chaos – give some information about a nameserver SYNOPSIS ldns-chaos NAMESERVER DESCRIPTION ldns-chaos retrieves all the addresses of the nameserver and then queries each address for its version.bind and hostname.bind. ldns-chaos is a bit more complex than ldns-mx. OPTIONS ldns-chaos has no options. AUTHOR Written by the ldns team as an example for ldns…
NAME ldmtool – A tool to manage Microsoft Windows dynamic disks SYNOPSIS ldmtool [options] ldmtool [options] scan [device…] ldmtool [options] show diskgroup {disk group GUID} ldmtool [options] show {volume | partition | disk} {disk group GUID} {object name} ldmtool [options] {create | remove} all ldmtool [options] {create | remove} volume {disk group GUID} {volume name}…