I've been messing around with centralized syslogs and I found one of my boxes logging MBs of "kernel" information. :O The problem started when I moved all the boxes to syslog-ng. It turned out that the intense logging was a repeated 2 or 3 lines. I searched for the particular log and couldn't find much, so I hope this helps anyone else in a similar position.
The log entries come in the form of
BANDWIDTH_OUT, prefixed by kernel: [time.inseconds].