.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.3
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sh \" Subsection heading
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" Set up some character translations and predefined strings.  \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote.  | will give a
.\" real vertical bar.  \*(C+ will give a nicer C++.  Capital omega is used to
.\" do unbreakable dashes and therefore won't be available.  \*(C` and \*(C'
.\" expand to `' in nroff, nothing in troff, for use with C<>.
.tr \(*W-|\(bv\*(Tr
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
.    if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\"  diablo 12 pitch
.    ds L" ""
.    ds R" ""
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L" ``
.    ds R" ''
'br\}
.\"
.\" If the F register is turned on, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.if \nF \{\
.    de IX
.    tm Index:\\$1\t\\n%\t"\\$2"
..
.    nr % 0
.    rr F
.\}
.\"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.hy 0
.if n .na
.\"
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear.  Run.  Save yourself.  No user-serviceable parts.
.    \" fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&
.    ds #] \&
.\}
.    \" simple accents for nroff and troff
.if n \{\
.    ds ' \&
.    ds ` \&
.    ds ^ \&
.    ds , \&
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\" ========================================================================
.\"
.IX Title "WALKER 1"
.TH WALKER 1 "2005-09-20" "perl v5.8.7" "User Contributed Perl Documentation"
.SH "NAME"
walker \- Retrieve a DNS zone using NXT/NSEC traversal
.SH "SYNOPSIS"
.IX Header "SYNOPSIS"
\&\fBwalker\fR [\-y] [\-n] [\-d] [\-x] [\ \fB@\fR\fInameserver\fR\ ] \fIzone\fR [\ \fIstartname\fR\ ]
.SH "DESCRIPTION"
.IX Header "DESCRIPTION"
\&\fBwalker\fR retrieves a \s-1DNS\s0 zone from the default or supplied name
server and prints each record to the standard output.  \s-1AXFR\s0 is not
used, instead the \s-1DNSSEC\s0 \s-1NXT/NSEC\s0 record chain is traversed.  The zone
must use \s-1DNSSEC\s0.  The output should conform to the standard \s-1DNS\s0 master
file format (but see \fB\s-1BUGS\s0\fR).  Optionally, \fBwalker\fR can also verify
\&\s-1DNSSEC\s0 signatures on the RRsets within the zone.
.SH "OPTIONS"
.IX Header "OPTIONS"
.IP "\-y" 4
.IX Item "-y"
Additionally perform verification on each RRset within the zone and
print result of verification (in a zone file comment).  This also turn
on \s-1EDNS\s0.0 and set the \s-1DNSSEC\s0 flag in queries.
.IP "\-n" 4
.IX Item "-n"
When querying for records, ask the nameserver non\-recursively, instead
of going through the full resolver logic.  This parameter is useful
when you know that the default name server (or the supplied specific
nameserver) can respond correctly, which it typically only would if it
is responsible for the zone.
.Sp
The original motivation for the \-n parameter was to improve speed when
asking parents for \s-1NS\s0 records on delegated zones, which would make the
server recursively ask the child servers.
.IP "\-d" 4
.IX Item "-d"
Enable debugging in the resolver (this will print all \s-1DNS\s0 packets,
just like dig).
.IP "\-x" 4
.IX Item "-x"
Enable the \s-1EDNS\s0.0 \s-1DNSSEC\s0 flag for \s-1SIG/RRSIG\s0 queries.  Not effective if
\&\-y is used.  This is needed for some servers to return \s-1SIG/RRSIG\s0 at
all.
.IP "\fB@\fR\fInameserver\fR" 4
.IX Item "@nameserver"
Query \fInameserver\fR instead of the default nameserver.
.IP "\fIzone\fR" 4
.IX Item "zone"
Name of the zone to retrieve master file for.  For example, \*(L"com\*(R".
.IP "\fIstartname\fR" 4
.IX Item "startname"
Optional name to start the zone walk at.  The default is to start
walking from the start.  This option is useful if the tool failed or
was intterupted in the middle of a large zone.
.SH "AUTHOR"
.IX Header "AUTHOR"
Simon Josefsson <simon@josefsson.org>
.SH "BUGS"
.IX Header "BUGS"
\&\s-1CNAME\s0, \s-1CERT\s0 and/or \s-1SRV\s0 RRs is known to cause perl warnings during
verifications with some versions of Net::DNS and Net::DNS::SEC.  The
cause is belived to be in Perl, Net::DNS or Net::DNS::SEC.  The reader
is encouraged to track down and fix these bugs.
.SH "SEE ALSO"
.IX Header "SEE ALSO"
\&\fIperl\fR\|(1), axfr, perldig, Net::DNS, Net::DNS::SEC, resolv.conf