Hello actually this is not a problem/question/bug/error/etc...

This is a matter of curiousity

There are been very popular, the "Name Server Spy" sites, where you give some functional Name Server, and get a list of all domains that NS has.

Two sites for example (to try your self):
http://www.gwebtools.com/ns-spy/
http://www.domaintools.com/ (you must creat an account here)

(Google NS Spy or name server spy, and find many others)

Then the question is...

IS there any Linux command/port, you can run to connect to the server NS (telnet session maybe), and get the info of the domains that are resolved by that server?

Some where, I read that a way to do this, is some how getting a list of all domains in the net, and simply run a query from those that accomplish the NS requested. But if so... then ... Is there a place/way to obtain that huge domain list? any way to connect to the root NS servers, and get that data?

And other ideas how to accomplish this?

DNS Servers support wildcards in domain names. I think this can be administratively controlled. Anyway, maybe you can try to get the sub-domain names by issuing a query for example on: *.google.com.

no I need to know ALL DOMAINS that are resolved by the DNS not their subdomains.

IE: the domain linuxquestions.org has this NS: MYDYNDNS.ORG

if you query that DNS: in those sites you will get:
http://www.gwebtools.com/ns-spy/ns1.mydyndns.org

that there are 74746 domains in that NS

How do they know? that... i try my own DNS and get almos all domains I got in there