I keep getting these email notifications like the following:

Apr 16 09:16:54 mchn39 zimbramon[13495]: 13495:err: Service status change: mchn39.ocdirect.net antivirus changed from running to stopped

And then I get another one reporting this:
Apr 16 09:18:47 mchn39 zimbramon[13495]: 13495:err: Service status change: mchn39.ocdirect.net antivirus changed from stopped to running

Is this normal? Since it has "err" in the message I think it might not be normal. But I can find anything to suggest an issue maybe occuring.

--
robert