Use session audit or log miner to figure out what happened.