Re: syslog messages flooding the console

[John Magolske <listmail@b79.net>]

* Darac Marjal <mailinglist@darac.org.uk> [140924 07:37]:
> On Tue, Sep 23, 2014 at 05:55:22PM -0700, John Magolske wrote:
> > After a recent `aptitude dist-upgrade` I'm getting syslog messages
> > flooding the console, pages & pages of "Asset Found" stuff like:
> > 
> > Message from syslogd@mymachine at Sep 23 13:46:11 ...
> > ... Asset Found:  IP Address - 16.20.3.0 / MAC Address - 0:00:00:00:00:00#012[*]
> > Asset Found:  IP Address - 26.20.3.0 / MAC Address - 0:00:00:00:00:00#012[*]
> > Asset Found:  IP Address - 34.20.3.0 / MAC Address - 0:00:00:00:00:00#012[*] ...
> 
> According to a search
> (http://codesearch.debian.net/search?q=Asset+Found), these messages come
> from pads (which apt describes as standing for Passive Asset Detection
> System). I would suggest trying the following:
>  * Review the documentation to see if there's a quiet mode
>  * See if the output can be logged directly to a file instead of syslog
>  * See if the priority of the syslog messages can be reduced.
> 
> I suspect the program is logging with an emergency or similar priority
> and your syslogd is helpfully forwarding that to the console (because
> you typically DO want those high-priority messages sent to someone).

Thanks! That was indeed the issue, I opened /etc/pads/pads.conf and
saw this:

    # output:  screen
    # -------------------------
    # This output plugin displays PADS data to the screen.
    # It is mainly used for debugging purposes.
    output screen

so commenting out that "output screen" stopped messages from being
output to the console screen.

John

-- 
John Magolske
http://B79.net/contact