Zone Transfers with dig

As with nslookup, you can use dig to initiate zone transfers. Unlike nslookup, though, dig has no special command to request a zone transfer. Instead, you simply specify axfr (as the query type) and the domain name of the zone as arguments. Remember that you can only transfer a zone from a name server that’s authoritative for the zone.

So to transfer the movie.edu zone from wormhole.movie.edu, you could use:

C:\> dig @wormhole.movie.edu movie.edu axfr ; <<>> DiG 8.4 <<>> @wormhole.movie.edu movie.edu axfr ; (1 server found) $ORIGIN movie.edu. @ 1D IN SOA terminator al.robocop ( 2000091402 ; serial 3H ; refresh 1H ; retry 1W ; expiry 1H ) ; minimum 1D IN NS terminator 1D IN NS wormhole 1D IN NS outland.fx outland.fx 1D IN A 192.253.254.3 wormhole 1D IN A 192.249.249.1 1D IN A 192.253.253.1 wh249 1D IN A 192.249.249.1 robocop 1D IN A 192.249.249.2 bigt 1D IN CNAME terminator cujo 1D IN TXT "Location:" "machine" "room" "dog" "house" wh253 1D IN A 192.253.253.1 wh 1D IN CNAME wormhole shining 1D IN A 192.253.253.3 terminator 1D IN A 192.249.249.3 localhost 1D IN A 127.0.0.1 fx 1D IN NS bladerunner.fx bladerunner.fx 1D IN A 192.253.254.2 fx 1D IN NS outland.fx outland.fx 1D IN A 192.253.254.3 dh 1D IN CNAME diehard carrie 1D IN A 192.253.253.4 diehard 1D IN A 192.249.249.4 misery 1D IN A 192.253.253.2 @ 1D IN SOA terminator al.robocop ( 2000091402 ; serial 3H ; refresh 1H ; retry 1W ; expiry 1H ) ; minimum ;; Received 25 answers (25 records). ;; FROM: terminator.movie.edu ...

Get DNS on Windows Server 2003, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.