Root cause analysis / Investigation

copilot.com

Reference RCA-1C120F2AED92D3EE

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

04 Nov 2026 23:45 – 05 Nov 2026 02:59 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
21.936 ms
22.041 ms
21.919 ms
21.946 ms
21.869 ms
21.951 ms
21.943 ms
21.920 ms
21.924 ms
21.928 ms
21.931 ms
21.973 ms
21.978 ms
21.969 ms
21.955 ms
21.889 ms
21.938 ms
21.909 ms
22.011 ms
21.995 ms
22.363 ms
22.478 ms
22.358 ms
22.389 ms
24.569 ms
22.436 ms
22.377 ms
21.880 ms
21.986 ms
21.943 ms
21.937 ms
21.957 ms
21.852 ms
22.467 ms
22.459 ms
22.364 ms
22.421 ms
22.485 ms
22.438 ms
22.372 ms
22.399 ms
22.395 ms
22.394 ms
22.378 ms
22.456 ms
22.377 ms
22.442 ms
6.388 ms
6.390 ms
6.396 ms
6.404 ms
6.404 ms
6.427 ms
6.416 ms
6.384 ms
6.399 ms
6.384 ms
6.443 ms
6.406 ms
6.384 ms
6.383 ms
6.403 ms
6.462 ms
6.407 ms
6.406 ms
6.390 ms
6.397 ms
6.417 ms
6.445 ms
6.423 ms
6.416 ms
6.372 ms
6.395 ms
6.368 ms
6.387 ms
6.384 ms
6.381 ms
6.377 ms
6.407 ms
6.416 ms
6.381 ms
6.412 ms
6.372 ms
6.449 ms
6.403 ms
6.388 ms
6.420 ms
6.403 ms
6.384 ms
6.438 ms
6.396 ms
6.414 ms
6.379 ms
6.410 ms
6.409 ms
6.455 ms
6.389 ms
6.426 ms
6.411 ms
6.382 ms
6.385 ms
6.428 ms
6.419 ms
6.393 ms
6.378 ms
6.382 ms
6.421 ms
6.483 ms
6.402 ms
6.397 ms
6.399 ms
6.418 ms
6.446 ms
6.443 ms
6.387 ms
6.409 ms
6.379 ms
6.461 ms
6.411 ms
6.421 ms
6.459 ms
6.426 ms
6.384 ms
6.450 ms
6.392 ms
22.832 ms
22.838 ms
22.845 ms
22.868 ms
22.799 ms
22.839 ms
22.866 ms
22.827 ms
22.884 ms
22.876 ms
22.936 ms
22.893 ms
22.877 ms
22.854 ms
22.912 ms
22.814 ms
22.882 ms
22.816 ms
22.850 ms
22.831 ms
22.849 ms
22.843 ms
22.825 ms
22.838 ms
22.831 ms
22.843 ms
22.877 ms
22.797 ms
22.805 ms
22.898 ms
22.839 ms
22.834 ms
22.860 ms
25.251 ms
22.903 ms
22.866 ms
22.798 ms
22.827 ms
22.854 ms
22.874 ms
22.860 ms
22.902 ms
22.872 ms
22.815 ms
22.820 ms
22.867 ms
22.820 ms
22.854 ms
22.867 ms
22.829 ms
22.865 ms
22.838 ms
22.883 ms
22.826 ms
22.863 ms
22.858 ms
22.899 ms
22.834 ms
22.832 ms
22.888 ms
22.865 ms
22.850 ms
22.879 ms
22.843 ms
22.867 ms
22.846 ms
22.812 ms
22.875 ms
22.947 ms
22.904 ms
22.853 ms
22.808 ms
22.852 ms
22.826 ms
22.818 ms
22.837 ms
22.846 ms
22.870 ms
22.849 ms
22.789 ms
22.793 ms
22.819 ms
22.813 ms
22.843 ms
22.836 ms
22.827 ms
22.839 ms
22.919 ms
22.898 ms
22.888 ms
6.768 ms
6.744 ms
6.766 ms
6.720 ms
6.768 ms
6.757 ms
6.728 ms
6.739 ms
6.739 ms
6.794 ms
6.726 ms
6.757 ms
6.711 ms
6.741 ms
6.726 ms
6.787 ms
6.736 ms
6.784 ms
6.767 ms
6.725 ms
6.784 ms
6.790 ms
6.727 ms
6.723 ms
6.739 ms
6.743 ms
6.852 ms
7.008 ms
6.759 ms
6.775 ms
6.758 ms
6.726 ms
6.720 ms
6.709 ms
6.735 ms
6.727 ms
6.742 ms
6.748 ms
6.746 ms
6.725 ms
6.747 ms
6.750 ms
6.769 ms
6.730 ms
6.750 ms
6.726 ms
6.740 ms
6.758 ms
6.721 ms
6.728 ms
6.752 ms
6.738 ms
6.748 ms
6.748 ms
6.744 ms
6.778 ms
6.723 ms
6.756 ms
6.764 ms
6.737 ms
6.766 ms
6.740 ms
6.718 ms
6.752 ms
6.739 ms
6.744 ms
6.776 ms
6.746 ms
6.768 ms
6.760 ms
6.750 ms
6.766 ms
6.752 ms
6.753 ms
6.725 ms
6.732 ms
6.757 ms
6.734 ms
6.749 ms
6.726 ms
6.719 ms
6.734 ms
6.793 ms
6.742 ms
6.745 ms
6.724 ms
6.748 ms
6.815 ms
6.833 ms
6.742 ms
6.741 ms
6.740 ms
6.774 ms
6.711 ms
6.726 ms
6.739 ms
6.736 ms
6.760 ms
6.764 ms
6.739 ms
6.729 ms
22.875 ms
22.856 ms
22.937 ms
22.865 ms
21.943 ms
21.923 ms
21.949 ms
21.946 ms
21.939 ms
21.893 ms
22.895 ms
22.824 ms
22.855 ms
22.858 ms
22.857 ms
22.842 ms
22.855 ms
22.886 ms
22.894 ms
22.843 ms
22.831 ms
22.823 ms
22.835 ms
22.839 ms
22.869 ms
22.828 ms
22.862 ms
22.825 ms
22.810 ms
22.882 ms
22.879 ms
22.912 ms
22.838 ms
22.893 ms
22.871 ms
22.864 ms
22.806 ms
22.896 ms
22.864 ms
23.129 ms
22.835 ms
22.902 ms
22.846 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.116 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.151 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop22.859 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop21.788 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.308 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.299 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop23.052 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop22.023 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop18.191 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop21.349 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination24.518 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.121 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.025 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.155 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.214 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.775 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.350 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.584 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.145 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.172 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.798 msReply RTT ASN unavailable
  3. TTL 3 Probe hop0.823 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.379 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop6.879 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.002 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.472 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.129 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.162 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop1.472 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.428 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.365 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop118.727 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.931 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.878 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.734 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop20.010 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop22.986 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination25.115 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.145 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.394 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.531 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.800 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.140 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop1.305 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.934 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop6.559 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop6.724 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.817 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.340 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.312 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.286 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.001 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.041 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.408 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.183 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.359 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop6.763 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.207 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.500 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.127 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.175 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.086 msReply RTT ASN unavailable
  3. TTL 3 Probe hop2.104 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop64.821 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.515 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop6.944 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop6.932 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.653 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.127 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.107 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.159 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.853 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.164 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.490 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.371 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.932 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.286 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop23.242 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.804 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop66.525 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop23.003 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.963 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 1

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.121 msAS8002 · Stealth0.145 msAS8002 · StealthSame responder
21.025 msAS8075 · MicrosoftNot recordedNot established
ICMP traceroute · Recorded address 3

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.116 msAS8002 · Stealth0.129 msAS8002 · StealthSame responder
TCP traceroute / 443 · Recorded address 1

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.155 msAS8002 · Stealth0.172 msAS8002 · StealthSame responder
2No reply1.798 msNot established
3No reply0.823 msAS8075 · MicrosoftNot established
47.214 msAS8075 · Microsoft7.379 msAS8075 · MicrosoftDifferent responders
5No reply6.879 msAS8075 · MicrosoftNot established
67.775 msAS8075 · Microsoft7.002 msAS8075 · MicrosoftDifferent responders
77.350 msAS8075 · MicrosoftNo replyNot established
8No replyNo replyNot established
9No replyNo replyNot established
10No replyNo replyNot established
11No reply6.472 msAS8075 · MicrosoftNot established
126.584 msAS8075 · MicrosoftNot recordedNot established
TCP traceroute / 443 · Recorded address 3

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.151 msAS8002 · Stealth0.162 msAS8002 · StealthSame responder
2No replyNo replyNot established
3No reply1.472 msAS8075 · MicrosoftNot established
422.859 msAS8075 · Microsoft23.428 msAS8075 · MicrosoftDifferent responders
521.788 msAS8075 · Microsoft23.365 msAS8075 · MicrosoftDifferent responders
623.308 msAS8075 · Microsoft118.727 msAS8075 · MicrosoftDifferent responders
723.299 msAS8075 · Microsoft23.931 msAS8075 · MicrosoftDifferent responders
823.052 msAS8075 · Microsoft24.878 msAS8075 · MicrosoftDifferent responders
922.023 msAS8075 · Microsoft23.734 msAS8075 · MicrosoftDifferent responders
1018.191 msAS8075 · Microsoft20.010 msAS8075 · MicrosoftDifferent responders
1121.349 msAS8075 · Microsoft22.986 msAS8075 · MicrosoftDifferent responders
12No replyNo replyNot established
1324.518 msAS8075 · Microsoft25.115 msAS8075 · MicrosoftSame responder

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.741 msUsual round trip before the event
Last recorded event RTT6.739 msLast successful event recording
Event p95 RTT22.904 ms95th percentile of successful recordings
Change from baseline-0.002 msLast event RTT compared with the baseline
Successful / expected recordings150 / 150Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology