Source: snmpd
Severity: important
Tags: patch

Dear Maintainer,

the `/etc/default/snmpd` included in the current version of the "snmpd"
package launches snmpd with the option "-Lsd", which makes it log
everything with a priority >= LOG_NOTICE — which includes the message
"Connection from UDP: [198.51.100.1]:50955->[203.0.113.1]" for every
single query made to the SNMP server.

It would be preferable to have the logging verbosity default to >=
LOG_WARNING to avoid cluttering the syslog.

I have attached a patch that changes all relevant occurences of "-Lsd"
(log >= notice) to "-LSwd" (log >= warning).


-- System Information:
[Removed, since I'm reporting this bug from an Ubuntu system that isn't
actually running snmpd.]
I have confirmed that the excessively verbose logging option is used by
the current snmpd versions in wheezy (5.4.3~dfsg-2.8+deb7u1) and sid
(5.7.3+dfsg).
diff -r a/debian/snmpd.default b/debian/snmpd.default
11c11
< SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -g snmp -I -smux,mteTrigger,mteTriggerConf -p /run/snmpd.pid'
---
> SNMPDOPTS='-LSwd -Lf /dev/null -u snmp -g snmp -I -smux,mteTrigger,mteTriggerConf -p /run/snmpd.pid'
diff -r a/debian/snmpd.init b/debian/snmpd.init
29c29
< SNMPDOPTS="-Lsd -Lf /dev/null -p $SNMP_PID"
---
> SNMPDOPTS="-LSwd -Lf /dev/null -p $SNMP_PID"
diff -r a/debian/snmptrapd.default b/debian/snmptrapd.default
9c9
< TRAPDOPTS='-Lsd -p /run/snmptrapd.pid'
---
> TRAPDOPTS='-LSwd -p /run/snmptrapd.pid'
diff -r a/debian/snmptrapd.init b/debian/snmptrapd.init
29c29
< TRAPDOPTS="-Lsd -p $TRAPD_PID"
---
> TRAPDOPTS="-LSwd -p $TRAPD_PID"

Reply via email to