arpaname：translate IP addresses to the corresponding ARPA names.
bind9-config：hardlinked to isc-config.sh.
ddns-confgen：generates a key for use by nsupdate and named.
delv：is a new debugging tool that is a successor to dig.
dig：interrogates DNS servers.
dnssec-checkds：is a DNSSEC delegation consistency checking tool.
dnssec-coverage：verifies that the DNSSEC keys for a given zone or a set of zones have timing metadata set properly to ensure no future lapses in DNSSEC coverage.
dnssec-dsfromkey：outputs the Delegation Signer (DS) resource record (RR).
dnssec-importkey：reads a public DNSKEY record and generates a pair of .key/.private files.
dnssec-keyfromlabel：gets keys with the given label from a crypto hardware and builds key files for DNSSEC.
dnssec-keygen：is a key generator for secure DNS.
dnssec-revoke：Set the REVOKED bit on a DNSSEC key.
dnssec-settime：set the key timing metadata for a DNSSEC key.
dnssec-signzone：generates signed versions of zone files.
dnssec-verify：verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the zone, and that the NSEC / NSEC3 chains are complete.
genrandom：generate a file containing random data.
host：is a utility for DNS lookups.
isc-config.sh：prints information related to the installed version of ISC BIND.
isc-hmac-fixup：fixes HMAC keys generated by older versions of BIND.
lwresd：is a caching-only name server for local process use.
named：is the name server daemon.
named-checkconf：checks the syntax of named.conf files.
named-checkzone：checks zone file validity.
named-compilezone：is similar to named-checkzone, but it always dumps the zone contents to a specified file in a specified format.
named-journalprint：print zone journal in human-readable form.
named-rrchecker：read a individual DNS resource record from standard input and checks if it is syntactically correct.
nsec3hash：generates an NSEC3 hash based on a set of NSEC3 parameters.
nslookup：is a program used to query Internet domain nameservers.
nsupdate：is used to submit DNS update requests.
rndc：controls the operation of BIND.
rndc-confgen：generates rndc.conf files.
tsig-keygen：is a symlink to ddns-confgen.

参考文献

BLFS/BIND-9.10.4-P2