Root cause analysis / Investigation

copilot.microsoft.com

Reference RCA-1C4EF84FDD5E8856

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

06 Nov 2026 14:50 – 06 Nov 2026 18:34 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
1.018 ms
1.030 ms
4.735 ms
0.953 ms
10.429 ms
0.964 ms
1.014 ms
0.982 ms
0.980 ms
17.528 ms
1.354 ms
1.509 ms
1.383 ms
1.397 ms
1.063 ms
1.354 ms
0.990 ms
0.995 ms
0.969 ms
1.366 ms
1.063 ms
0.973 ms
1.368 ms
14.231 ms
14.116 ms
1.400 ms
14.202 ms
0.947 ms
0.955 ms
0.974 ms
1.595 ms
1.005 ms
1.008 ms
1.032 ms
1.049 ms
0.960 ms
1.063 ms
1.367 ms
1.388 ms
1.351 ms
1.090 ms
1.372 ms
1.382 ms
1.361 ms
1.335 ms
1.367 ms
1.361 ms
1.365 ms
0.985 ms
0.965 ms
1.462 ms
1.355 ms
1.010 ms
1.583 ms
2.218 ms
1.007 ms
0.960 ms
1.414 ms
1.021 ms
3.502 ms
1.356 ms
1.062 ms
1.071 ms
1.363 ms
0.937 ms
1.037 ms
14.206 ms
1.395 ms
1.417 ms
0.996 ms
1.001 ms
1.403 ms
1.361 ms
7.578 ms
1.389 ms
1.052 ms
1.023 ms
1.380 ms
1.378 ms
0.963 ms
1.008 ms
1.031 ms
1.051 ms
0.981 ms
0.963 ms
1.007 ms
0.983 ms
1.366 ms
1.074 ms
1.414 ms
0.966 ms
1.378 ms
0.989 ms
0.963 ms
1.358 ms
1.363 ms
1.589 ms
1.381 ms
1.029 ms
1.376 ms
1.076 ms
1.618 ms
2.065 ms
1.400 ms
5.270 ms
1.368 ms
1.094 ms
1.366 ms
1.371 ms
1.356 ms
1.432 ms
1.387 ms
1.024 ms
1.028 ms
1.258 ms
0.991 ms
1.031 ms
2.853 ms
0.971 ms
0.968 ms
0.992 ms
1.398 ms
1.386 ms
0.988 ms
1.356 ms
1.367 ms
11.662 ms
0.966 ms
1.007 ms
1.481 ms
1.061 ms
1.431 ms
1.733 ms
1.034 ms
1.301 ms
0.986 ms
1.409 ms
0.955 ms
1.387 ms
1.046 ms
1.629 ms
1.452 ms
1.054 ms
1.364 ms
13.771 ms
2.864 ms
0.963 ms
1.470 ms
0.973 ms
0.996 ms
1.406 ms
1.171 ms
1.069 ms
1.020 ms
1.461 ms
0.991 ms
7.415 ms
1.373 ms
0.963 ms
0.963 ms
1.049 ms
2.694 ms
0.975 ms
0.989 ms
1.007 ms
7.728 ms
6.480 ms
16.068 ms
5.104 ms
1.368 ms
0.974 ms
4.938 ms
1.377 ms
1.093 ms
1.033 ms
1.399 ms
1.063 ms
1.046 ms
1.335 ms
20.231 ms
1.009 ms
0.981 ms
0.952 ms
1.794 ms
0.951 ms
0.978 ms
1.469 ms
1.382 ms
1.401 ms
1.420 ms
1.360 ms
8.574 ms
1.569 ms
0.990 ms
0.969 ms
1.029 ms
1.370 ms
14.370 ms
1.128 ms
19.697 ms
2.842 ms
0.928 ms
1.035 ms
1.425 ms
2.355 ms
1.382 ms
0.990 ms
1.038 ms
4.796 ms
20.867 ms
16.664 ms
0.998 ms
11.960 ms
2.648 ms
4.082 ms
1.008 ms
0.975 ms
3.270 ms
1.006 ms
1.033 ms
12.276 ms
1.032 ms
1.428 ms
1.363 ms
1.382 ms
1.401 ms
1.362 ms
0.997 ms
1.505 ms
0.981 ms
1.022 ms
1.343 ms
0.966 ms
1.362 ms
1.394 ms
1.511 ms
1.074 ms
1.095 ms
1.341 ms
1.349 ms
5.679 ms
1.031 ms
3.526 ms
1.043 ms
0.984 ms
1.678 ms
1.001 ms
1.448 ms
1.049 ms
1.368 ms
1.374 ms
1.687 ms
1.413 ms
1.002 ms
1.374 ms
1.440 ms
0.975 ms
1.397 ms
7.274 ms
1.394 ms
1.075 ms
0.996 ms
1.419 ms
1.015 ms
1.021 ms
16.663 ms
0.974 ms
1.080 ms
1.363 ms
10.460 ms
0.963 ms
1.400 ms
1.338 ms
1.399 ms
5.818 ms
3.000 ms
1.022 ms
0.984 ms
19.622 ms
1.007 ms
1.388 ms
0.979 ms
1.404 ms
1.355 ms
1.005 ms
1.013 ms
0.997 ms
1.456 ms
0.948 ms
1.002 ms
0.980 ms
1.011 ms
0.972 ms
1.021 ms
1.063 ms
6.504 ms
1.004 ms
17.858 ms
0.986 ms
20.701 ms
1.531 ms
0.973 ms
1.030 ms
1.000 ms
10.300 ms
1.384 ms
1.030 ms
1.397 ms
2.699 ms
1.174 ms
2.517 ms
1.047 ms
3.084 ms
1.162 ms
1.041 ms
13.558 ms
4.355 ms
1.081 ms
1.025 ms
16.159 ms
1.062 ms
1.282 ms
1.026 ms
4.258 ms
0.967 ms
0.964 ms
14.272 ms
1.061 ms
1.694 ms
0.978 ms
1.018 ms
6.176 ms
4.622 ms
1.089 ms
1.462 ms
1.008 ms
1.637 ms
1.015 ms
14.760 ms
14.160 ms
0.979 ms
1.645 ms
1.012 ms
17.654 ms
1.058 ms
0.963 ms
11.516 ms
0.956 ms
17.838 ms
0.976 ms
21.260 ms
19.900 ms
0.979 ms
1.003 ms
0.988 ms
1.039 ms
17.271 ms
1.162 ms
21.708 ms
Network path / recorded observations

Network path observations.

25 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.129 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.177 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop3.926 msReply RTT AS13335 · Cloudflare
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.178 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.271 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop5.464 msReply RTT AS13335 · Cloudflare
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop5.528 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.757 msReply RTT AS13335 · Cloudflare
Before

ICMP traceroute · Destination 1

Comparison window · median of 20 traces


to UTC

  1. TTL 1 Stealth associated hop0.135 msMedian reply RTT20/20 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.192 msMedian reply RTT20/20 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop5.890 msMedian reply RTT15/20 replies · 75.0%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
Before

TCP/443 traceroute · Destination 2

Comparison window · median of 14 traces


to UTC

  1. TTL 1 Stealth associated hop0.156 msMedian reply RTT14/14 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.183 msMedian reply RTT14/14 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop2.847 msMedian reply RTT12/14 replies · 85.7%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Destination reply1.293 msMedian reply RTT12/14 replies · 85.7%ASN unavailable
  7. TTL 7 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
Before

ICMP traceroute · Destination 3

Comparison window · median of 10 traces


to UTC

  1. TTL 1 Stealth associated hop0.134 msMedian reply RTT10/10 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.183 msMedian reply RTT10/10 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop1.474 msMedian reply RTT10/10 replies · 100.0%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
Before

TCP/443 traceroute · Destination 4

Comparison window · median of 16 traces


to UTC

  1. TTL 1 Stealth associated hop0.167 msMedian reply RTT16/16 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.192 msMedian reply RTT16/16 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop3.855 msMedian reply RTT15/16 replies · 93.8%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Destination reply1.330 msMedian reply RTT14/16 replies · 87.5%ASN unavailable
  7. TTL 7 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
Before

ICMP traceroute · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.145 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.190 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop12.162 msReply RTT ASN unavailable
  4. TTL 4 Probe hop1.812 msReply RTT AS13335 · Cloudflare
  5. TTL 5 Probe hop5.336 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.039 msReply RTT AS13335 · Cloudflare
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.149 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.180 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop3.855 msReply RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop5.173 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.260 msReply RTT AS13335 · Cloudflare
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.145 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.176 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop27.398 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.507 msReply RTT AS13335 · Cloudflare
During

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.136 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.236 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop1.257 msReply RTT ASN unavailable
During

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.147 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.209 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop1.047 msReply RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop1.377 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.484 msReply RTT AS13335 · Cloudflare
During

ICMP traceroute · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.129 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.243 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop19.983 msReply RTT AS13335 · Cloudflare
  4. TTL 4 Probe hop6.925 msReply RTT AS13335 · Cloudflare
  5. TTL 5 Probe hop16.727 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.065 msReply RTT AS13335 · Cloudflare
During

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.180 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.198 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop1.472 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.271 msReply RTT AS13335 · Cloudflare
During

ICMP traceroute · Destination 1

Comparison window · median of 11 traces


to UTC

  1. TTL 1 Stealth associated hop0.136 msMedian reply RTT11/11 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.201 msMedian reply RTT11/11 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop4.941 msMedian reply RTT9/11 replies · 81.8%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
During

TCP/443 traceroute · Destination 2

Comparison window · median of 16 traces


to UTC

  1. TTL 1 Stealth associated hop0.168 msMedian reply RTT16/16 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.189 msMedian reply RTT16/16 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop5.788 msMedian reply RTT11/16 replies · 68.8%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Destination reply1.280 msMedian reply RTT12/16 replies · 75.0%ASN unavailable
  7. TTL 7 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
During

ICMP traceroute · Destination 3

Comparison window · median of 19 traces


to UTC

  1. TTL 1 Stealth associated hop0.134 msMedian reply RTT19/19 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.184 msMedian reply RTT19/19 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop2.648 msMedian reply RTT14/19 replies · 73.7%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
During

TCP/443 traceroute · Destination 4

Comparison window · median of 14 traces


to UTC

  1. TTL 1 Stealth associated hop0.157 msMedian reply RTT14/14 replies · 100.0%ASN unavailable
  2. TTL 2 Stealth associated hop0.192 msMedian reply RTT14/14 replies · 100.0%ASN unavailable
  3. TTL 3 First responding external hop6.586 msMedian reply RTT12/14 replies · 85.7%AS13335 · Cloudflare
  4. TTL 4 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  5. TTL 5 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
  6. TTL 6 Destination reply1.370 msMedian reply RTT9/14 replies · 64.3%ASN unavailable
  7. TTL 7 Unidentified or changing hopUnavailableMedian reply RTTReply coverage unavailableASN unavailable
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.114 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.312 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.179 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.510 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop3.356 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.125 msReply RTT AS13335 · Cloudflare
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.146 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.203 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop9.619 msReply RTT ASN unavailable
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.143 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.192 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop8.972 msReply RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop1.702 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.562 msReply RTT AS13335 · Cloudflare
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.124 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.218 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop23.340 msReply RTT AS13335 · Cloudflare
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.160 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.174 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hop0.992 msReply RTT AS13335 · Cloudflare
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop2.132 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Destination1.639 msReply RTT AS13335 · Cloudflare
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.467 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.202 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.147 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.203 msReply RTT AS8002 · Stealth
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop1.304 msReply RTT AS13335 · Cloudflare
  6. TTL 6 Destination1.004 msReply RTT AS13335 · Cloudflare

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 1

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.145 msAS8002 · Stealth0.136 msAS8002 · StealthSame responder
20.190 msAS8002 · Stealth0.236 msAS8002 · StealthSame responder
312.162 ms1.257 msSame responder
41.812 msAS13335 · CloudflareNot recordedNot established
55.336 msAS13335 · CloudflareNot recordedNot established
61.039 msAS13335 · CloudflareNot recordedNot established
ICMP traceroute · Recorded address 2

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.129 msAS8002 · Stealth0.114 msAS8002 · StealthSame responder
20.177 msAS8002 · Stealth0.312 msAS8002 · StealthSame responder
33.926 msAS13335 · CloudflareNot recordedNot established
TCP traceroute / 443 · Recorded address 2

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.145 msAS8002 · Stealth0.147 msAS8002 · StealthSame responder
20.176 msAS8002 · Stealth0.209 msAS8002 · StealthSame responder
3No reply1.047 msNot established
4No replyNo replyNot established
527.398 msAS13335 · Cloudflare1.377 msAS13335 · CloudflareDifferent responders
61.507 msAS13335 · Cloudflare1.484 msAS13335 · CloudflareSame responder

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Latency anomaly. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Stealth replies stable; external replies varied.

Sampled Stealth associated replies stayed within the comparison limits while external replies varied. The external path, destination and return path remain areas to investigate.

What we observed

  • A sustained increase in measured round trip time was observed.
  • Stored traces were compared using matching source and destination addresses.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT1.101 msUsual round trip before the event
Last recorded event RTT1.349 msLast successful event recording
Event p95 RTT13.963 ms95th percentile of successful recordings
Change from baseline+0.249 msLast event RTT compared with the baseline
Successful / expected recordings210 / 210Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology