/tmp directory filling up due to twisted ssh info messages

Software SW bugs discussion
1

Hello,
I have run in to trouble with my /tmp directory filling up on Turris Omnia, and I believe I have identified a growing /tmp/log/messages.1 file as the cause. I see a bunch of the following messages accumulating in my logs. This is rather annoying because DNS stops working when /tmp fills, and Luci also stops working. I have been resolving the issue by rebooting my router, but I would like to figure out what is generating all this log noise and fix it. I have removed Nextcloud and some LXC containers. I’ve also removed majordomo. I’m beginning to suspect this might be the honeypot service, but I’m curious if anybody else has run in to this and if it might be a bug.

Here are some messages in the logs:

2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,1,103.207.36.90] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,931,103.207.36.90] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,301,103.207.36.90] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,118,103.207.36.90] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,698,103.207.36.90] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,798,163.172.192.9] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,134,212.83.138.25] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,34,212.83.138.25] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,919,212.83.138.25] got global keepalive@jcraft.com request
2018-02-03T19:43:31-07:00 info twisted[]: [SSHService ssh-connection on SSHServerTransport,733,212.83.138.25] got global keepalive@jcraft.com request```
3

Thanks - removing honeypot does look like it stopped the majority of the log noise. I’m still seeing some info messages from wireless connections, but the twisted info messages are gone.

I think the log rotation is also kind of messed up. I noticed that logrotate wouldn’t work when I tried to force it, until I created an empty /etc/logrotate.d directory.