Previous: Examine the Bulk Trace if Available, Up: Analysis of Incidents and Alarms


6.8 Contact and Question Appropriate People

The final and usually the most definitive investigation is to call the owners of the hosts involved. Often a call to the owner of the local host can reveal that the activity was not normal, but appropriate or a mistake.