ldns-read-zone(1)
π ldns-read-zone β the manual page, but make it cute π
okay bestie, so this is the manual page for ldns-read-zone, from the General Commands Manual section. It's a lil program that reads a DNS zone file and prints it back out at you. Let's get into it π«Ά
β¨ NAME β¨
ldns-read-zone β read a zonefile and print it
πΈ SYNOPSIS πΈ
ldns-read-zone ZONEFILE
π¦ DESCRIPTION π¦
so ldns-read-zone reads a DNS zone file and prints it. that's it, that's the job. π
the output is 1 resource record per line, and there's no pretty-printing makeup β it's giving raw, unfiltered, no filter needed. periodt.
π OPTIONS π
-0β prints a(null)for the RRSIG inception, expiry and key data. bestie this one's for when you're comparing different signing systems that use the same DNSKEYs for signing but have slightly different timings/jitter β the nulls cancel out the noise so you can actually compare. slay.-bβ include Bubble Babble encoding of DS's. yes it's a real encoding name. iconic behavior honestly.-cβ canonicalize all resource records in the zone before printing. glow-up pass first. β¨-dβ only print DNSSEC data from the zone. this skips every record that is not of type NSEC, NSEC3 or RRSIG. and heads up βDNSKEYandDSrecords are NOT printed. not me filtering those out too π-eRR type β do not print RRs of the given rr type. you can pass this option multiple times if you've got a whole list of types to skip. also,-eis not meant to be used together with-Eβ pick a lane bestie.-ERR type β print only RRs of the given rr type. also may be given multiple times. and same deal:-Eis not meant to be used together with-e. don't mix them, it's giving chaos.-hβ show usage and exit. the classic "help me" button π-nβ do not print the SOA record. just, like, leaving it out. respectfully.-pβ pad the SOA serial number with spaces so the number and the spaces together take ten characters. super useful for in file serial number increments β keeps everything lined up and aesthetic. π-sβ strip DNSSEC data from the zone. this skips every record that is of type NSEC, NSEC3 or RRSIG. butDNSKEYandDSrecords are still printed. so it's like-d's opposite-ish energy.-S [[+|0]number | YYYYMMDDxx | unixtime ]β set the serial number to the given number, or when it's preceded by a sign, offset the existing number with it. when you give the literal stringsYYYYMMDDxxorunixtime, the serial number is tried to be reset in datecounter or in unixtime format respectively. and here's the lil twist π β if the updated serial number is smaller than the original one, the original one is simply increased by one.
β οΈ when updating a serial number, records of typeNSEC,NSEC3,RRSIGandDNSKEYwill be skipped when printing the zone. so they just don't show up. no cap.
-uRR type β mark RR type for printing in unknown type format. and-uis not meant to be used together with-U. seriously.-URR type β mark RR type for not printing in unknown type format. okay so here's the tea β: the first occurrence of the-Uoption marks all RR types for printing in unknown type format except for the given RR type. then subsequent-Uoptions will clear the mark for those RR types too, so that only the given RR types will be printed in the presentation format specific for those RR types. it's giving layers. π§ and-Uis not meant to be used together with-u. i'm begging you.-vβ show the version and exit. lil flex. β¨-zβ sort the zone before printing. and heads up, this implies-cβ so you get the canonicalize glow-up for free. obsessed. π
π AUTHOR π
written by the ldns team as an example for ldns usage. they ate and left no crumbs. π
π REPORTING BUGS π
found a bug? report it to <dns-team@nlnetlabs.nl>. bestie the devs wanna hear from you, fr fr. π
π COPYRIGHT π
Copyright (C) 2005 NLnet Labs. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. so like, no safety net, you're on your own vibes-wise. π
and that's the whole page bestie!! this version is the one from 30 May 2005, and it's the ldns-read-zone(1) page. go read some zones, you got this πβ¨π¦
π¦ where this page comes from
- alpine 3.22: ldns-doc 1.8.4-r0 Β· BSD-3-Clause
- alpine 3.23: ldns-doc 1.8.4-r1 Β· BSD-3-Clause
- alpine 3.24: ldns-doc 1.8.4-r1 Β· BSD-3-Clause
- arch rolling: ldns 1.9.2-1 Β· custom:BSD
- debian trixie: ldnsutils 1.8.4-2+b1
- fedora 43: ldns-utils 1.8.4-8.fc43 Β· BSD-3-Clause
- fedora 43: ldns-utils 1.9.2-1.fc43 Β· BSD-3-Clause
- fedora 44: ldns-utils 1.9.0-2.fc44 Β· BSD-3-Clause
- fedora 44: ldns-utils 1.9.2-1.fc44 Β· BSD-3-Clause
- nixos 26.05: ldns 1.9.2
- nixpkgs unstable: ldns 1.9.2
- opensuse-leap 16.0: ldns 1.8.4-160000.3.1 Β· BSD-3-Clause
- opensuse-leap 16.0: ldns 1.8.4-160000.3.1 Β· BSD-3-Clause
- opensuse-leap 16.0: ldns 1.8.4-160000.3.1 Β· BSD-3-Clause
- opensuse-leap 16.0: ldns 1.8.4-160000.3.1 Β· BSD-3-Clause
- ubuntu questing: ldnsutils 1.8.4-2build1
- ubuntu resolute: ldnsutils 1.8.4-2build3
- ubuntu stonking: ldnsutils 1.9.2-1ubuntu1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms