Command List
auth users and authentication
configure Enter configuration mode
curl curl command
date Show current date
df df command
exit Exit from the console
free command to show memory usage
hist Print a list of commands that have been entered
nslookup nslookup
ping ping
reboot Reboot the box
request request
reset Reset appliance configuration and data
restart Restart various modules
scp Secure copy files to external host using SCP
show show
shutdown shutdown the box
status status
tcpdump take tcpdump
telnet telnet command
top command to show current CPU/MEM usage
traceroute traceroute
troubleshooting Troubleshooting tools
auth change-password nsadmin Command
Use this command to change the password of the nsadmin user account.
The DLP On Demand appliance uses a limited set of functionality from the Netskope appliance and adding/deleting users has not been included.
nsappliance> auth change-password nsadmin New password: <newpassword> Retype new password: <newpassword> passwd: password updated successfully
configure Command
This command enters configuration mode on the appliance.
configuration mode Commands
The configure mode contains multiple commands:
add Add list to config subtree
delete Delete various parameters
exit Exit configuration mode
load Load a configuration that was last saved when you want to discard some most recent operations that weren’t saved.
run Run an op mode command from within the configuration mode. The same command can be run outside the configuration mode by removing the run prefix.
save save
set Set various parameters
show Show config subtree
The configure mode is used to define, modify, and save system settings. It maintains a running configuration tree that can be viewed with the show command. The set command is the most commonly used within this mode to apply configuration changes.
| Set Commands | Description |
|---|---|
dns | Used to set the primary and secondary DNS. Note that setting the primary DNS is mandatory. |
interface | This appliance has a default interface that is DHCP enabled when it boots up. So, it gets the IP, Gateway, and Subnet Mask automatically. This command is used to set a static IP, Gateway, Subnet mask in case you want to override the auto assigned values. |
save | Used to save any changes made within configuration mode. This command must be run to save any changes. |
server-cert | This command is used to set the server certificate that was signed by CA. Please see Configure Certificates for more details. |
server-intermediate-ca-chain | This command is used to set the certificate chain provided by the CA that signed. The CA will most likely be an intermediate CA. Please see Configure Certificates for more details. |
server-key | This command is used to set the private key used to sign an SSL Cert. Please see Configure Certificates for more details. |
system | This is used to set system parameters like license key, login banner, hostname etc. |
date Command
This command shows the system date:
nsappliance> date
Thu 10 Apr 2025 05:06:49 PM UTC
df Command
This command displays disk space usage for all mounted file systems, showing sizes in KB, MB, or GB.
nsappliance> df
Filesystem Size Used Avail Use% Mounted on
udev 3.6G 0 3.6G 0% /dev
tmpfs 744M 3.3M 741M 1% /run
/dev/mapper/nsappliance--vg-OS1 78G 55G 19G 75% /
tmpfs 3.7G 1.9M 3.7G 1% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 3.7G 0 3.7G 0% /sys/fs/cgroup
/dev/xvda2 27M 2.5M 23M 11% /grubcfg
/dev/xvda3 130M 118M 1.5M 99% /boot
/dev/mapper/nsappliance--vg-lcmongo--infrastructure 3.9G 24K 3.7G 1% /var/ns/docker/mounts/lcmongo-infrastructure/mountpoint
/dev/mapper/nsappliance--vg-lclw 32G 116K 30G 1% /var/ns/docker/mounts/lclw/mountpoint
/dev/mapper/securestore.main 51G 19G 30G 39% /opt/ns
/dev/mapper/securestore.upgrade 32G 28K 30G 1% /opt/ns/upgrades
tmpfs 744M 0 744M 0% /run/user/1000
exit Command
This command is used to exit from the nsshell or from the configure mode.
free Command
This command shows the memory usage and swap memory available.
nsappliance> free
total used free shared buff/cache available
Mem: 7438 2683 145 6 4609 4451
Swap: 1023 181 842
hist Command
This command displays your command history.
nslookup Command
This command command queries DNS to find a domain’s IP address or an IP’s domain name.
ping Command
This command tests network connectivity to a host by sending packets and measuring the latency and packet loss.
reboot Command
This command reboots the appliance.
request Command
This command is used to generate certificate requests or self-signed certs. Please refer to Configure Certificates for the usage.
Sub Commands:
certificate-request: Generates a.csrfile in the path:/opt/ns/appliance/certs/csr.crtself-signed:Generates a self signed certificate key pair in the paths:/opt/ns/appliance/certs/server.crt&/opt/ns/appliance/private/server.key
Usage:
request certificate generate certificate-request city <city> common-name <common-name> country <country> days <days> email-address <email-address> organization <organization> organization-unit <organization-unit> state <state> request certificate generate self-signed city <city> common-name <common-name> country <country> days <days> email-address <email-address> organization <organization> organization-unit <organization-unit> state <state>
reset Command
This command resets the appliance’s configuration.
restart Command
This command restarts various modules running on the appliance.
scp Command
This command is used for exporting the debug-package to an external host.
nsappliance> scp export debug-package to
host Remote host or IP to connect to
path Path (including filename) on remote host to copy to
user User name on the remote host
show Command
This command displays various configuration details on the appliance.
nsappliance> show
config config
dns dns configured on the system
interface interface information
password-age Show password age
route route
service-status Show status for all services
shutdown Command
This command shuts down the appliance.
status Command
status tethering shows the tethering info when the appliance is tethered to the internet.
Once tethering is completed the tenant-url, serial and rest-token should get populated with the right values. The serial shown here should match the serial as shown in the web UI. The cfgagent_connected & callhome_reachable should become true when tethering is successful.
nsappliance> status tethering
Tethering status
{
"tethering_status": {
"cfg_serial_file_synced": false,
"cloud_serial_file_synced": false,
"cfgagent_connected": false,
"callhome_reachable": false
},
"precheck_status": {
"required_images_present": false,
"required_containers_running": false
}
}
=========================================
Tethering info
{
"tenant-url": "",
"serial": "",
"identifier": "033d720a-160e-11f0-a5d3-0242ac110003",
"rest-token": ""
}
status system should show the hostname, current appliance version, the uptime, current memory usage
nsappliance> status system
{
"disk_usage": {
"/": "75%",
"/boot": "99%",
"/dev": "0%",
"/dev/shm": "1%",
"/grubcfg": "11%",
"/opt/ns": "39%",
},
"mem_usage": "39%",
"uptime": "5:37:21.910000",
"hostname": "nsappliance",
"cur_version": "125.0.0.101",
"downloaded_versions": []
}
tcpdump Command
This command captures, displays, and saves network traffic in real-time for network troubleshooting and analysis.
telnet Command
This command initiates an interactive, text-based network session with a remote host, often used to test port connectivity.
top Command
Used to understand the system load in terms of CPU, Memory and virtual memory used.
nsappliance> top
top - 17:04:19 up 3:51, 1 user, load average: 0.01, 0.22, 0.30
Tasks: 247 total, 1 running, 246 sleeping, 0 stopped, 0 zombie
%Cpu(s): 3.2 us, 1.9 sy, 0.0 ni, 94.7 id, 0.1 wa, 0.0 hi, 0.2 si, 0.0 st
MiB Mem : 7438.9 total, 175.8 free, 2650.7 used, 4612.4 buff/cache
MiB Swap: 1024.0 total, 842.0 free, 182.0 used. 4484.5 avail Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
4694 root 20 0 2099440 724420 95760 S 8.6 9.5 20:43.39 k3s-server
1948 root 20 0 2124288 85756 29376 S 4.0 1.1 10:52.59 dockerd
18993 root 20 0 1988624 531448 39964 S 3.3 7.0 7:21.90 nsdlp
761 root 20 0 2099224 34764 12928 S 2.0 0.5 3:34.04 containerd
6410 nsadmin 20 0 1283832 49924 29628 S 0.7 0.7 0:57.93 metrics-server
6415 65532 20 0 1294096 51240 33832 S 0.7 0.7 1:46.45 coredns
17000 nsadmin 20 0 34104 7420 4916 S 0.7 0.1 1:09.51 redis-server
18549 root 20 0 1238
traceroute Command
This command displays the network path and measures the transit delays of packets as they travel from your system to a destination host.
nsappliance> traceroute host www.google.com
1?: [LOCALHOST] pmtu 1500
1: 100.126.2.245 0.294ms
1: 100.126.2.245 0.250ms
2: 240.3.180.14 1.803ms asymm 6
3: 99.82.14.76 2.084ms asymm 8
4: 99.82.14.77 1.453ms asymm 7
5: no reply
6: no reply
7: no reply
8: no reply
9: no reply
10: no reply
11: no reply
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
25: no reply
26: no reply
27: no reply
28: no reply
29: no reply
30: no reply
Too many hops: pmtu 1500
Resume: pmtu 1500
troubleshooting Command
This is to have generate and export debug package to examine logs to debug the system. It has following subcommands for further troubleshooting.
nsappliance> troubleshooting
'troubleshooting' is not a complete command.
Possible commands for 'troubleshooting':
coredump core file management
debug-package Netskope debug package
reprocess-logs Reprocess log files that are older than the specified time
diagnostic-agent Diagnostic agent
nsappliance>
troubleshooting coredump subcommand
This is used for getting status of coredump partition and cleanup core files.
nsappliance> troubleshooting coredump
cleanup cleanup all core files
status coredump status
nsappliance> troubleshooting coredump status
==========================================
coredump partition mounted: True
current space reserved: 32G
current coredump size: 0B
space used by non coredumps: 1M
total partition size: 32G
total used: 1.4M
==========================================
troubleshooting debug-package subcommand
Use this option to generate or upload a debug package that assists Netskope Support in troubleshooting issues. The package contains all service and system logs, and you can optionally include core dumps.
nsappliance> troubleshooting debug-package
generate Generate debug package. Optionally pass include-coredumps to include crash dumps
upload Upload debug package directly to Netskope