auth: sdig manpage: fix formatting; update with new features

diff --git a/docs/manpages/sdig.1.rst b/docs/manpages/sdig.1.rst
index fc19e119b80ffa1012f61e18400e0428322bec8d..8d144357b09301768f0b999f5c9b01e057642847 100644 (file)
--- a/docs/manpages/sdig.1.rst
+++ b/docs/manpages/sdig.1.rst
@@ -4,28 +4,34 @@ sdig
 Synopsis
 --------
 
-:program:`sdig` *IPADDRESS* *PORT* *QNAME* *QTYPE* [*OPTION*]
+:program:`sdig` *IP-ADDRESS-OR-DOH-URL * *PORT* *QNAME* *QTYPE* [*OPTION*]
 
 Description
 -----------
 
-:program:`sdig` sends a DNS query to *IPADDRESS* on port *PORT* and displays
+:program:`sdig` sends a DNS query to *IP-ADDRESS-OR-DOH-URL* on port *PORT* and displays
 the answer in a formatted way.
+If the address starts with an ``h``, it is assumed to be a DoH endpoint, and *PORT* is ignored.
 
 Options
 -------
 
-These options can be added to the commandline in any order. dnssec : Set
-the DO bit to request DNSSEC information.
+These options can be added to the commandline in any order.
 
+dnssec
+    Set the DO bit to request DNSSEC information.
+ednssubnet *SUBNET*
+    Send *SUBNET* in the edns-client-subnet option. If this option is
+    not set, no edns-client-subnet option is set in the query.
 hidesoadetails
     Don't show the SOA serial in the response.
+hidettl
+    Replace TTLs with `[ttl]` in the response.
 recurse
     Set the RD bit in the question.
 showflags
-    Show the NSEC3 flags in the response.
+    Show the NSEC3 flags in the response (they are hidden by default).
 tcp
     Use TCP instead of UDP to send the query.
-ednssubnet *SUBNET*
-    Send *SUBNET* in the edns-client-subnet option. If this option is
-    not set, no edns-client-subnet option is set in the query.
+xpf *XPFCODE* *XPFVERSION* *XPFPROTO* *XPFSRC* *XPFSRC*
+       Send an *XPF* additional with these parameters.
\ No newline at end of file