CSF/LFD -- lfd.log question

[bmcpanel]

I use CSF/LFD on my RHEL4 server with Cpanel installed, Version 11.8 R16276

ConfigServer Security & Firewall - csf v2.87


Should I be concerned about this log entry.

vi /var/log/lfd.log

Mon Aug 13 14:44:48 2007 lfd: /usr/local/cpanel/logs/login_log has been reset. Reopening log file
Mon Aug 13 14:44:48 2007 lfd: Watching /usr/local/cpanel/logs/login_log...

[bmcpanel]

I use CSF/LFD on my RHEL4 server with Cpanel installed, Version 11.8 R16276

ConfigServer Security & Firewall - csf v2.87


Should I be concerned about this log entry.

vi /var/log/lfd.log

Mon Aug 13 14:44:48 2007 lfd: /usr/local/cpanel/logs/login_log has been reset. Reopening log file
Mon Aug 13 14:44:48 2007 lfd: Watching /usr/local/cpanel/logs/login_log...

Surely there is someone who has an opinion on this. Check your own logs and tell me, are your logs being cleared multiple times per day. (It only happens with "login_log")

/usr/local/cpanel/logs/login_log

It is cleared, zeroed out at least 2-3 times per day. It appears to be doing this on multiple machines of mine. I do not think it is hacker related. What could be zeroing out this log file?

[chirpy]

cPanel usually does that whenever it is restarted.

[bmcpanel]

cPanel usually does that whenever it is restarted.

I was hoping that was the case. I am a log watcher, and when a "login log" get's zeroed out, it makes me paranoid!

Thank you for letting me know.