Detecting abnormal operation