I have CSF on a cPanel server, and two times within the past two weeks I've received an email from the cPanel Service Monitor saying that LFD had stopped and had been restarted. I checked /var/log/lfd.log and found this:
Code: Select all
Jun 16 14:46:21 gerald lfd[32359]: *SSH login* from X into the Y account using publickey authentication
Jun 16 15:16:27 gerald lfd[1259]: *SSH login* from X into the Y account using publickey authentication
Jun 16 15:46:28 gerald lfd[1901]: *SSH login* from X into the Y account using publickey authentication
Jun 16 16:02:33 gerald lfd[26029]: *Error* pid mismatch or missing, at line 825
Jun 16 16:02:33 gerald lfd[26029]: daemon stopped
Jun 16 16:05:50 gerald lfd[3483]: daemon started on Z - csf v6.15 (cPanel)
Jun 16 16:05:50 gerald lfd[3483]: CSF Tracking...
Jun 16 16:02:33 gerald lfd[26029]: *Error* pid mismatch or missing, at line 825
Any suggestions for where to look next to determine what caused this? This is on a CentOS VPS with an up-to-date CSF.
Thanks!
- Taj