Root cause analysis / Investigation

copilot.com

Reference RCA-21475E8F94B97590

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

05 Nov 2026 23:05 – 06 Nov 2026 03:09 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.911 ms
6.889 ms
6.917 ms
6.961 ms
6.923 ms
6.921 ms
6.301 ms
6.288 ms
6.288 ms
6.311 ms
6.303 ms
6.294 ms
6.286 ms
6.303 ms
6.295 ms
6.308 ms
6.340 ms
6.309 ms
6.299 ms
6.283 ms
6.384 ms
6.324 ms
6.285 ms
6.292 ms
6.268 ms
6.284 ms
6.290 ms
6.299 ms
6.319 ms
6.290 ms
6.291 ms
6.270 ms
6.306 ms
6.281 ms
6.285 ms
6.373 ms
6.351 ms
6.302 ms
6.297 ms
6.351 ms
6.289 ms
6.285 ms
6.301 ms
6.336 ms
6.290 ms
6.279 ms
6.287 ms
6.323 ms
6.313 ms
6.316 ms
6.284 ms
6.301 ms
6.284 ms
6.320 ms
6.773 ms
6.757 ms
6.728 ms
6.734 ms
6.713 ms
6.721 ms
6.704 ms
6.711 ms
6.716 ms
6.782 ms
6.691 ms
6.762 ms
6.744 ms
6.753 ms
6.776 ms
6.709 ms
6.739 ms
6.752 ms
6.710 ms
6.706 ms
6.734 ms
6.713 ms
6.694 ms
6.716 ms
6.743 ms
6.727 ms
6.704 ms
6.770 ms
6.710 ms
6.726 ms
6.739 ms
6.748 ms
6.801 ms
6.726 ms
6.715 ms
6.704 ms
6.733 ms
6.693 ms
6.727 ms
6.722 ms
6.703 ms
6.726 ms
6.738 ms
6.884 ms
6.751 ms
6.689 ms
6.787 ms
6.742 ms
6.709 ms
6.733 ms
6.718 ms
6.735 ms
6.693 ms
6.758 ms
6.735 ms
6.736 ms
6.732 ms
6.712 ms
6.739 ms
6.707 ms
6.707 ms
6.707 ms
6.761 ms
6.736 ms
6.736 ms
6.707 ms
6.723 ms
6.728 ms
22.839 ms
22.846 ms
22.828 ms
22.833 ms
22.842 ms
22.879 ms
22.800 ms
22.850 ms
22.821 ms
22.834 ms
21.917 ms
21.930 ms
21.925 ms
21.931 ms
21.897 ms
21.901 ms
22.870 ms
22.805 ms
22.840 ms
22.870 ms
22.860 ms
22.797 ms
22.843 ms
22.835 ms
22.825 ms
22.883 ms
22.869 ms
22.827 ms
22.832 ms
22.882 ms
22.888 ms
22.813 ms
22.872 ms
22.833 ms
22.852 ms
22.887 ms
22.848 ms
22.835 ms
22.837 ms
22.865 ms
22.861 ms
22.815 ms
22.969 ms
22.841 ms
22.845 ms
22.839 ms
22.839 ms
22.439 ms
22.387 ms
22.465 ms
22.849 ms
22.882 ms
23.087 ms
22.900 ms
22.883 ms
22.892 ms
22.862 ms
22.892 ms
22.787 ms
22.829 ms
22.909 ms
22.800 ms
22.791 ms
22.901 ms
22.881 ms
22.828 ms
22.815 ms
22.808 ms
22.784 ms
22.868 ms
22.821 ms
22.821 ms
22.795 ms
22.906 ms
22.823 ms
22.854 ms
22.905 ms
22.836 ms
22.810 ms
22.853 ms
22.821 ms
21.964 ms
21.905 ms
21.926 ms
22.814 ms
22.813 ms
22.859 ms
22.832 ms
22.872 ms
22.873 ms
22.855 ms
22.823 ms
22.801 ms
22.365 ms
22.419 ms
22.416 ms
22.428 ms
22.836 ms
22.843 ms
22.827 ms
22.418 ms
22.413 ms
6.723 ms
6.745 ms
6.753 ms
6.721 ms
6.723 ms
6.736 ms
6.740 ms
6.326 ms
6.340 ms
6.336 ms
6.332 ms
6.348 ms
6.331 ms
6.327 ms
5.935 ms
5.987 ms
5.976 ms
6.334 ms
6.360 ms
6.310 ms
6.342 ms
6.328 ms
6.382 ms
6.310 ms
6.317 ms
6.317 ms
6.365 ms
6.329 ms
6.321 ms
6.328 ms
6.350 ms
6.346 ms
6.314 ms
6.333 ms
6.297 ms
6.314 ms
6.348 ms
6.342 ms
6.341 ms
6.349 ms
6.371 ms
6.360 ms
6.324 ms
6.344 ms
6.324 ms
6.321 ms
6.348 ms
6.429 ms
6.350 ms
6.352 ms
6.359 ms
6.325 ms
6.318 ms
6.326 ms
6.347 ms
6.369 ms
6.358 ms
6.357 ms
6.312 ms
6.362 ms
6.402 ms
6.389 ms
6.342 ms
6.336 ms
6.326 ms
6.328 ms
6.324 ms
6.305 ms
6.367 ms
6.313 ms
6.337 ms
6.326 ms
6.359 ms
6.312 ms
6.355 ms
6.335 ms
6.334 ms
6.350 ms
6.331 ms
6.320 ms
6.314 ms
6.340 ms
6.316 ms
6.318 ms
6.325 ms
6.336 ms
6.309 ms
6.339 ms
6.359 ms
6.362 ms
6.360 ms
6.321 ms
6.360 ms
6.339 ms
6.323 ms
6.308 ms
6.327 ms
6.318 ms
6.314 ms
6.336 ms
6.312 ms
6.366 ms
6.322 ms
6.335 ms
6.341 ms
6.735 ms
6.749 ms
6.811 ms
6.722 ms
6.733 ms
6.792 ms
6.721 ms
6.726 ms
6.739 ms
6.750 ms
6.752 ms
6.729 ms
6.752 ms
6.715 ms
6.768 ms
6.723 ms
6.743 ms
6.731 ms
6.723 ms
6.761 ms
6.716 ms
6.751 ms
6.722 ms
6.727 ms
6.721 ms
6.710 ms
6.752 ms
6.735 ms
6.738 ms
6.736 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.140 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.165 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.466 msReply RTT ASN unavailable
  3. TTL 3 Probe hop5.293 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop8.288 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop6.901 msReply RTT AS8075 · Microsoft
  7. TTL 7 Destination8.275 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.125 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.177 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop2.370 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.334 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.586 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop8.368 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.158 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.124 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.912 msReply RTT ASN unavailable
During

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.163 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop3.867 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.744 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop6.500 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.758 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.136 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.984 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.185 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.552 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop192.836 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.986 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.772 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.152 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.865 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop23.569 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.830 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.088 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.882 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.670 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop20.128 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop29.279 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.947 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.171 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.151 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.051 msReply RTT ASN unavailable
  3. TTL 3 Probe hop1.732 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.216 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.512 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.073 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.316 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.126 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.034 msReply RTT ASN unavailable
  3. TTL 3 Probe hop13.069 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.468 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.145 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.150 msReply RTT ASN unavailable
  3. TTL 3 Probe hop0.738 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.381 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop8.445 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop8.139 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.796 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.130 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.216 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.983 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.820 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.736 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.316 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.349 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.190 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.818 msReply RTT ASN unavailable
  3. TTL 3 Probe hop1.186 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop49.750 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop6.957 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.122 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.146 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.052 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.476 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.747 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.679 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.734 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 5

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.125 msAS8002 · Stealth0.124 msAS8002 · StealthSame responder
2Not recorded0.912 msNot established
TCP traceroute / 443 · Recorded address 5

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.177 msAS8002 · Stealth0.163 msAS8002 · StealthSame responder
22.370 msAS8075 · MicrosoftNo replyNot established
3No reply3.867 msAS8075 · MicrosoftNot established
47.334 msAS8075 · Microsoft6.744 msAS8075 · MicrosoftDifferent responders
5No replyNo replyNot established
67.586 msAS8075 · Microsoft6.500 msAS8075 · MicrosoftDifferent responders
78.368 msAS8075 · MicrosoftNo replyNot established
8No replyNo replyNot established
9No replyNo replyNot established
10No replyNo replyNot established
11No reply6.758 msAS8075 · MicrosoftNot established
127.158 msAS8075 · MicrosoftNot recordedNot established

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.749 msUsual round trip before the event
Last recorded event RTT5.987 msLast successful event recording
Event p95 RTT22.895 ms95th percentile of successful recordings
Change from baseline-0.762 msLast event RTT compared with the baseline
Successful / expected recordings248 / 250Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology