If PPP is enabled in the settings, the data logger effectively reviews what it should be doing with the PPP connection every second. If PPPClose was called at some point, the message “user closed ppp” is displayed in the trace log, every second or so. This means that the data logger checked what it should be doing and found that it should be closed. (It does not mean that PPPClose was called at that time.)