A repeatable, evidence-led method for diagnosing, resolving, validating, and documenting network incidents.
A troubleshooting method reduces guesswork and avoids turning a limited failure into a broader outage. The goal is not to follow a script mechanically; it is to collect enough evidence to make one controlled change at a time and verify the result.
1“Network is down”
2→ one named internal application fails for one floor
3→ direct IP access works
4→ investigate DNS or the application's name dependency before changing switches
The first complaint is often broader than the technical symptom. Refining the scope avoids unnecessary infrastructure changes.
| Habit | Why it matters |
|---|---|
| Compare with a baseline | Distinguishes unusual behavior from normal load or design |
| Check recent changes | Finds likely causes and helps select rollback options |
| Test one hypothesis at a time | Preserves causality and makes the result useful later |
| Prefer reversible changes | Limits risk while the cause is still uncertain |
| Preserve timestamps and evidence | Supports correlation, escalation, and post-incident review |
Avoid making several unrelated changes at once. Service may return, but the cause remains unknown and the incident is likely to recur. For controlled production changes, see Network Change Management.