a.iana-servers.net.
.fi
.P
-However, if you ask a root server, they will return the response in another section, called \(dqauthority\(dq. The \(dqanswer\(dq section is empty:
+However, if you ask a root server, they will return the response in
+another section, called \(dqauthority\(dq. The \(dqanswer\(dq section
+is empty:
.nf
.I $ dig +short @a.gtld-servers.net example.com NS
.P
So that's what we do. In NS mode, Haeredes will check both the
\(dqanswer\(dq and \(dqauthority\(dq sections for results.
+.SH PARALLEL QUERIES
+.P
+Haeredes can use multiple threads to perform its queries. It will use
+a number of threads equal to the number of processors available to the
+GHC runtime. This can be changed with the \fI+RTS \-N\fR flag. For
+example, to use 10 threads,
+
+.nf
+$ haeredes [OPTIONS] [DELEGATES] \fI+RTS -N10\fR
+.fi
.SH OPTIONS
.IP \fB\-\-no\-append\-root\fR,\ \fB-n\fR
Don't append a trailing dot to any DNS names. If you know what you're
doing, this can be used to check relative results. Otherwise, it will
probably just lead to false positives.
-.SH EXAMPLES
-
.IP \fB\-\-server\fR,\ \fB-s\fR
Use the given DNS server rather than the resolvers listed in
/etc/resolv.conf. Either an IP address or a hostname will work.
+.IP \fB\-\-timeout\fR,\ \fB-t\fR
+The number of seconds to wait for an answer from DNS (default: 15).
.SH EXAMPLES
.IP \[bu] 2
.nf
.I $ haeredes a.iana-servers.net b.iana-servers.net <<< \(dqexample.com\(dq
.fi
+
+.IP \[bu] 2
+If you use \-\-no\-append\-root and your nameservers are rooted, you
+must remember to supply the trailing dot yourself. Otherwise, you'll
+get false positives.
+
+.nf
+.I $ haeredes \-\-no\-append\-root \\\\
+.I " a.iana-servers.net b.iana-servers.net" \\\\
+.I " <<< \(dqexample.com\(dq"
+Domain \(dqexample.com\(dq delegates somewhere else:
+\(dqb.iana-servers.net.\(dq \(dqa.iana-servers.net.\(dq
+.fi
.IP \[bu]
Check orlitzky.com against the expected name servers, using
a root nameserver (this checks the registrar configuration):