doc isi.edu.
If the parent (delegating) domain can be determined simply by stripping off the first domain part and subsequent dot from the specified domain name, then there is no need to include the parent_domain_name parameter. Examples:
doc isi.edu. edu. (this is correct)
doc isi.edu. (this works too)
doc 9.128.in-addr.arpa. arpa. (this is correct)
doc 9.128.in-addr.arpa. (this will NOT work)
In the last (incorrect) example, because there is no parent domain specified, doc fills in the optional parent_domain parameter, and runs as if you specified:
doc 9.128.in-addr.arpa. 128.in-addr.arpa.
Since, the delegation information for 9.128.in-addr.arpa. is not at 128.in-addr.arpa. (rather at arpa.), this run will abort, and not report as expected.
The default operation of doc includes testing that all of the servers for the delegating (parent) domain agree about the delegation information held for the domain in question. Since inconsistencies discovered at this level may or may not indicate serious problems, one can choose to skip the parent testing. If so, doc uses the first non-authoritative list of NS records from a parent domain server as those to direct further queries. If all of the parent domain servers are additionally authoritative for the domain, the answer from the last one queried is used. This may be a useful timesaver if you are regularly checking up on a large number of domains. [See also section FILES USED for a similar functionality.]
The default mode of operation is to only print to standard output a summary of what is discovered. In addition, errors made in the process of testing (i.e. query errors, errors causing doc to abort, etc) are noted.
-e Output comments about errors discovered.
-w Output comments about warnings issued.
-v Verbose output. Include misc. comments and output
confirming correct behavior.
-d Debug output. Checkpoint current (last) nameserver query.
These output options are cumulative (i.e. -v implies -v -w -e).
NOTE: Parsing is very simple. All option flags must come before the domain names.
While running, doc creates several temporary files in the current directory. These files have names of the form:
Doc looks for the file DNsrv.<parent_domain_name> in the working directory. If it exists, doc does not make a standard query to discover the list of nameservers for the parent domain. Rather it queries the list of servers contained in this file to obtain delegation information for the domain being tested. This may be useful if one regularly tests a series of domains, all with the same delegating zone, where one of the servers in known to be foul. This server would simply be omitted from the the DNsrv.* file.
awk, sed & dig (version 2.0 or higher) are expected to be found in your normal path. If not, you may want to alias to the full path inside of doc itself.
The current implementation is fairly simple (albeit not pretty), so it is not expected to abort unexpectedly. However, this version (2.0) is an initial attempt at automating this task. Further development is expected in identifying the appropriate queries, analysis, and subsequent conclusions that are made. Hopefully once the design of the test suite has become more stable, a less "patchwork" production version of doc will be done.
Comments are very much welcome.