I usually just GREP them out.

dig -k .... axfr zone @remotehost | grep -v 'ANY[[:space:]]TSIG[[:space:]]'

Stuart

On 7/12/20, 1:32 am, "bind-users on behalf of Anand Buddhdev" 
<bind-users-boun...@lists.isc.org on behalf of ana...@ripe.net> wrote:

    Notice: This email is from an external sender.



    Hi folks,

    When I use "dig" to do a zone transfer, using TSIG, then the resulting
    zone is interspersed with TSIG records. Some tools, such as
    "dnssec-verify", don't like these records.

    Is there any way to tell dig not to print these TSIG records? Currently,
    I pass the zone through an awk script to filter out these records, but
    it would be nice if I could tell dig itself to suppress them.

    Regards,
    Anand Buddhdev
    _______________________________________________
    Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
unsubscribe from this list

    ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


    bind-users mailing list
    bind-users@lists.isc.org
    https://lists.isc.org/mailman/listinfo/bind-users

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to