Root cause analysis / Investigation

copilot.com

Reference RCA-30F5B2D8283A0988

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

28 Oct 2026 13:15 – 28 Oct 2026 16:39 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.745 ms
6.732 ms
6.733 ms
6.728 ms
6.739 ms
6.746 ms
6.803 ms
6.766 ms
6.761 ms
6.747 ms
6.802 ms
6.713 ms
6.760 ms
6.741 ms
6.782 ms
6.762 ms
6.747 ms
6.845 ms
6.760 ms
7.089 ms
6.737 ms
6.822 ms
6.795 ms
6.773 ms
6.752 ms
6.762 ms
6.744 ms
6.737 ms
6.947 ms
6.750 ms
6.748 ms
6.737 ms
6.733 ms
6.751 ms
6.738 ms
6.753 ms
6.752 ms
6.746 ms
6.744 ms
6.779 ms
6.787 ms
6.755 ms
6.742 ms
6.753 ms
6.768 ms
6.781 ms
6.740 ms
6.750 ms
6.784 ms
6.767 ms
8.455 ms
6.708 ms
6.727 ms
6.779 ms
6.756 ms
6.738 ms
6.728 ms
6.749 ms
6.748 ms
6.726 ms
6.788 ms
6.730 ms
6.762 ms
6.740 ms
6.763 ms
6.755 ms
6.825 ms
6.792 ms
6.748 ms
6.792 ms
6.755 ms
6.864 ms
6.719 ms
6.754 ms
6.761 ms
6.786 ms
6.788 ms
6.780 ms
6.738 ms
6.739 ms
6.793 ms
6.807 ms
6.757 ms
6.752 ms
6.294 ms
6.196 ms
6.319 ms
6.393 ms
6.247 ms
6.202 ms
6.315 ms
6.190 ms
6.348 ms
6.303 ms
6.284 ms
6.271 ms
6.330 ms
6.274 ms
6.224 ms
6.224 ms
6.258 ms
6.344 ms
6.317 ms
6.301 ms
6.460 ms
6.205 ms
6.227 ms
6.264 ms
6.250 ms
6.535 ms
6.208 ms
6.507 ms
6.246 ms
6.197 ms
6.336 ms
6.205 ms
6.401 ms
6.324 ms
6.171 ms
6.233 ms
6.182 ms
6.201 ms
6.275 ms
17.871 ms
17.923 ms
17.910 ms
18.279 ms
18.300 ms
18.268 ms
18.305 ms
18.308 ms
18.342 ms
18.297 ms
18.297 ms
18.341 ms
18.321 ms
18.327 ms
18.310 ms
18.354 ms
17.908 ms
17.929 ms
17.927 ms
17.915 ms
17.964 ms
17.911 ms
17.883 ms
17.932 ms
17.932 ms
17.938 ms
17.875 ms
17.881 ms
18.337 ms
18.322 ms
18.342 ms
18.279 ms
18.369 ms
18.297 ms
18.260 ms
17.899 ms
17.911 ms
17.923 ms
17.888 ms
17.879 ms
18.313 ms
18.262 ms
18.314 ms
18.326 ms
18.315 ms
18.296 ms
17.927 ms
17.932 ms
17.893 ms
17.998 ms
17.919 ms
18.311 ms
18.324 ms
18.307 ms
18.321 ms
18.313 ms
18.338 ms
18.294 ms
18.314 ms
17.509 ms
17.539 ms
17.469 ms
17.483 ms
17.567 ms
17.506 ms
17.512 ms
17.510 ms
17.526 ms
17.507 ms
21.917 ms
17.491 ms
17.505 ms
17.495 ms
17.529 ms
17.534 ms
17.498 ms
17.552 ms
17.541 ms
17.485 ms
17.482 ms
17.453 ms
17.528 ms
17.555 ms
17.547 ms
17.491 ms
17.506 ms
17.566 ms
17.545 ms
17.529 ms
17.549 ms
17.624 ms
17.537 ms
17.528 ms
17.484 ms
17.527 ms
19.569 ms
6.862 ms
6.911 ms
6.852 ms
6.904 ms
6.766 ms
6.764 ms
6.787 ms
6.741 ms
6.773 ms
6.818 ms
6.919 ms
6.874 ms
6.885 ms
6.893 ms
6.922 ms
6.847 ms
6.917 ms
6.886 ms
6.887 ms
6.967 ms
6.848 ms
6.877 ms
6.928 ms
6.887 ms
6.933 ms
6.878 ms
6.871 ms
6.463 ms
6.440 ms
6.401 ms
6.393 ms
6.408 ms
6.423 ms
6.397 ms
6.423 ms
6.407 ms
6.410 ms
6.381 ms
6.397 ms
6.432 ms
6.439 ms
6.395 ms
6.425 ms
6.429 ms
6.412 ms
6.395 ms
6.446 ms
6.449 ms
6.565 ms
6.419 ms
6.410 ms
6.445 ms
6.437 ms
6.448 ms
6.398 ms
6.480 ms
6.449 ms
6.413 ms
6.495 ms
6.398 ms
6.439 ms
6.434 ms
6.449 ms
6.390 ms
6.415 ms
6.439 ms
6.449 ms
6.450 ms
6.423 ms
6.412 ms
6.447 ms
6.430 ms
6.409 ms
6.461 ms
6.431 ms
17.912 ms
17.886 ms
17.927 ms
17.926 ms
17.924 ms
17.898 ms
18.322 ms
18.348 ms
18.299 ms
18.346 ms
18.334 ms
18.291 ms
18.305 ms
18.309 ms
18.327 ms
18.301 ms
18.325 ms
18.345 ms
18.330 ms
18.312 ms
18.322 ms
17.895 ms
17.941 ms
17.977 ms
17.886 ms
17.905 ms
17.975 ms
17.917 ms
17.874 ms
18.329 ms
18.331 ms
18.295 ms
18.344 ms
18.321 ms
18.298 ms
18.318 ms
18.320 ms
18.345 ms
18.302 ms
18.271 ms
18.317 ms
18.316 ms
18.330 ms
18.301 ms
17.862 ms
17.977 ms
17.880 ms
17.866 ms
17.898 ms
17.939 ms
17.955 ms
17.938 ms
18.280 ms
6.671 ms
6.722 ms
6.682 ms
6.683 ms
6.672 ms
6.638 ms
6.708 ms
6.689 ms
6.713 ms
6.692 ms
6.654 ms
6.675 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.133 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.070 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.163 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop20.020 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.213 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.583 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.162 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.154 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.757 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.276 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop6.931 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.734 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.000 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.142 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.045 msReply RTT ASN unavailable
  3. TTL 3 Probe hop11.358 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.754 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.731 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.277 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop8.146 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.153 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop7.700 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop6.794 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.461 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.129 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 7

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.158 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.014 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop19.130 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop19.449 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop18.795 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop19.091 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination18.152 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.143 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.671 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.161 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop1.486 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop6.660 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.690 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.127 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.160 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.857 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop6.911 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop6.227 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.460 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 8

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.126 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 7

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.231 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop1.329 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop70.828 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop19.257 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop19.523 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop19.864 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop18.252 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination18.616 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 8

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.122 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.824 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 6

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.208 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.212 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.664 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.828 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.966 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

No same-address, same-method pair is available among the selected replay samples. This does not mean no other matching traces were recorded.

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.696 msUsual round trip before the event
Last recorded event RTT6.848 msLast successful event recording
Event p95 RTT18.341 ms95th percentile of successful recordings
Change from baseline+0.152 msLast event RTT compared with the baseline
Successful / expected recordings170 / 170Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology