The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

CSF/LFD -- lfd.log question

Discussion in 'General Discussion' started by bmcpanel, Aug 13, 2007.

  1. bmcpanel

    bmcpanel Well-Known Member

    Joined:
    Jun 1, 2002
    Messages:
    546
    Likes Received:
    0
    Trophy Points:
    16
    I use CSF/LFD on my RHEL4 server with Cpanel installed, Version 11.8 R16276

    ConfigServer Security & Firewall - csf v2.87


    Should I be concerned about this log entry.

    vi /var/log/lfd.log

    Mon Aug 13 14:44:48 2007 lfd: /usr/local/cpanel/logs/login_log has been reset. Reopening log file
    Mon Aug 13 14:44:48 2007 lfd: Watching /usr/local/cpanel/logs/login_log...
     
  2. bmcpanel

    bmcpanel Well-Known Member

    Joined:
    Jun 1, 2002
    Messages:
    546
    Likes Received:
    0
    Trophy Points:
    16
    Surely there is someone who has an opinion on this. Check your own logs and tell me, are your logs being cleared multiple times per day. (It only happens with "login_log")

    /usr/local/cpanel/logs/login_log

    It is cleared, zeroed out at least 2-3 times per day. It appears to be doing this on multiple machines of mine. I do not think it is hacker related. What could be zeroing out this log file?
     
  3. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    cPanel usually does that whenever it is restarted.
     
  4. bmcpanel

    bmcpanel Well-Known Member

    Joined:
    Jun 1, 2002
    Messages:
    546
    Likes Received:
    0
    Trophy Points:
    16
    I was hoping that was the case. I am a log watcher, and when a "login log" get's zeroed out, it makes me paranoid! :)

    Thank you for letting me know.
     
Loading...

Share This Page