ldns-walk1
Retrieve the contents of a dnssec signed zone
Usage
ldns-walk [OPTION]
ZONE
Overview
ldns-walk is used to retrieve the contents of a DNSSEC signed zone. It does this through NSEC-walking (following the chain of NSEC records) and 'guessing' the next non-existent owner name for each NSEC.
Note that it might get stuck on some wildcard records when used through a caching forwarder. This problem can be circumvented by querying the authoritative nameserver directly (with the @ argument).
Of course the nameserver that is used must be DNSSEC-aware.
Options
-
-4 -
Use only IPv4.
-
-6 -
Use only IPv6.
-
-f -
Do a 'full' zone walk; by default, ldns-walk will only show the names, and types present at those names. If this option is given, all resource records will be printed.
-
-s name -
Start the walk with this owner name. Useful when continuing the walk for a large zone.
-
-v verbosity -
Verbosity level [1-5].
- @ nameserver
-
Send the queries to this nameserver.
Releases
10 releases since Debian 5.0 (Lenny); the text changed 3 times.
-4 since Debian 8 (Jessie);
-6 since Debian 8 (Jessie);
-f since Debian 6.0 (Squeeze);
-v since Debian 8 (Jessie).