Root cause analysis / Investigation

copilot.com

Reference RCA-3D0BDBE055B58332

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

02 Nov 2026 17:25 – 02 Nov 2026 20:29 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.935 ms
6.900 ms
6.926 ms
6.927 ms
6.604 ms
6.456 ms
6.391 ms
6.449 ms
6.470 ms
6.399 ms
6.467 ms
6.399 ms
6.430 ms
6.407 ms
6.454 ms
6.450 ms
6.389 ms
6.431 ms
6.381 ms
6.416 ms
6.473 ms
6.385 ms
7.222 ms
6.415 ms
6.421 ms
6.439 ms
6.431 ms
6.487 ms
6.457 ms
6.394 ms
6.447 ms
6.514 ms
6.638 ms
6.619 ms
6.650 ms
6.713 ms
6.666 ms
6.683 ms
6.643 ms
6.638 ms
6.678 ms
6.672 ms
6.650 ms
6.654 ms
6.687 ms
6.641 ms
6.663 ms
6.665 ms
6.699 ms
6.690 ms
6.614 ms
6.659 ms
6.626 ms
6.663 ms
6.693 ms
6.718 ms
6.665 ms
6.671 ms
6.675 ms
6.644 ms
6.641 ms
6.651 ms
6.664 ms
6.655 ms
6.659 ms
6.669 ms
6.639 ms
6.621 ms
6.646 ms
6.673 ms
6.674 ms
6.662 ms
6.650 ms
6.642 ms
6.712 ms
6.677 ms
6.667 ms
6.692 ms
6.658 ms
6.638 ms
6.666 ms
6.831 ms
6.652 ms
6.661 ms
6.685 ms
6.657 ms
6.663 ms
6.399 ms
6.376 ms
6.389 ms
6.422 ms
6.486 ms
6.392 ms
6.432 ms
6.407 ms
6.396 ms
6.379 ms
6.387 ms
6.411 ms
6.414 ms
6.403 ms
6.405 ms
6.380 ms
6.415 ms
6.430 ms
6.414 ms
6.388 ms
6.428 ms
6.398 ms
6.397 ms
6.389 ms
6.410 ms
6.424 ms
6.424 ms
6.415 ms
6.416 ms
6.409 ms
6.398 ms
6.404 ms
6.426 ms
22.896 ms
22.840 ms
22.867 ms
22.856 ms
22.822 ms
22.920 ms
22.888 ms
22.861 ms
23.133 ms
22.818 ms
22.931 ms
22.824 ms
22.842 ms
22.813 ms
22.828 ms
22.880 ms
22.887 ms
22.911 ms
22.847 ms
22.895 ms
22.899 ms
22.854 ms
22.773 ms
22.826 ms
22.885 ms
22.827 ms
22.853 ms
22.831 ms
22.847 ms
22.796 ms
22.866 ms
22.848 ms
22.878 ms
22.844 ms
22.902 ms
22.892 ms
22.815 ms
22.812 ms
22.916 ms
22.852 ms
22.874 ms
22.803 ms
22.820 ms
22.889 ms
22.824 ms
22.866 ms
22.812 ms
22.938 ms
22.899 ms
22.840 ms
22.804 ms
22.850 ms
22.813 ms
22.907 ms
22.870 ms
22.821 ms
22.864 ms
22.852 ms
22.843 ms
22.804 ms
22.858 ms
23.123 ms
22.906 ms
23.092 ms
22.877 ms
23.245 ms
22.893 ms
22.839 ms
22.851 ms
22.891 ms
22.866 ms
22.954 ms
22.847 ms
22.909 ms
22.811 ms
22.881 ms
22.815 ms
23.069 ms
22.814 ms
22.882 ms
22.849 ms
22.855 ms
22.854 ms
22.836 ms
22.865 ms
6.407 ms
6.398 ms
6.412 ms
6.562 ms
6.409 ms
6.411 ms
6.415 ms
6.738 ms
6.763 ms
6.600 ms
6.595 ms
6.601 ms
6.599 ms
6.708 ms
6.718 ms
6.742 ms
6.741 ms
6.713 ms
6.747 ms
6.724 ms
6.726 ms
6.715 ms
6.697 ms
6.703 ms
6.701 ms
6.735 ms
6.722 ms
6.714 ms
6.704 ms
6.733 ms
6.772 ms
6.727 ms
6.693 ms
6.724 ms
6.742 ms
6.784 ms
6.721 ms
6.711 ms
6.636 ms
6.595 ms
6.602 ms
6.612 ms
6.649 ms
6.633 ms
6.630 ms
6.629 ms
6.701 ms
6.609 ms
6.615 ms
6.651 ms
6.651 ms
6.721 ms
6.734 ms
6.712 ms
6.701 ms
6.719 ms
6.875 ms
6.697 ms
6.621 ms
6.621 ms
6.648 ms
6.625 ms
6.620 ms
6.599 ms
6.635 ms
6.685 ms
6.768 ms
6.714 ms
6.722 ms
6.704 ms
6.718 ms
6.804 ms
6.723 ms
6.719 ms
6.741 ms
6.745 ms
6.770 ms
6.729 ms
6.747 ms
6.737 ms
6.713 ms
6.705 ms
6.745 ms
6.705 ms
6.691 ms
6.726 ms
6.712 ms
6.705 ms
6.806 ms
6.728 ms
6.716 ms
6.718 ms
6.712 ms
6.731 ms
6.729 ms
6.732 ms
6.721 ms
6.719 ms
6.735 ms
6.766 ms
6.814 ms
6.806 ms
6.802 ms
6.740 ms
6.735 ms
6.763 ms
6.783 ms
6.757 ms
6.729 ms
6.774 ms
6.748 ms
6.766 ms
6.772 ms
6.727 ms
6.744 ms
6.753 ms
6.745 ms
6.725 ms
6.747 ms
6.794 ms
6.745 ms
6.751 ms
6.975 ms
6.814 ms
6.771 ms
6.733 ms
6.786 ms
6.757 ms
6.735 ms
6.751 ms
6.735 ms
6.775 ms
6.756 ms
6.759 ms
6.752 ms
6.723 ms
6.732 ms
6.723 ms
6.753 ms
6.764 ms
6.743 ms
6.743 ms
6.735 ms
6.768 ms
6.634 ms
6.665 ms
6.670 ms
6.706 ms
6.722 ms
6.693 ms
6.660 ms
6.682 ms
6.857 ms
6.649 ms
Network path / recorded observations

Network path observations.

17 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.125 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.189 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop8.441 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.143 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.502 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.118 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.933 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.155 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.940 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop8.531 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.373 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.640 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.252 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop23.559 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.478 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.353 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.327 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hop23.717 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.873 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop22.885 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination23.067 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.133 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.402 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop3.829 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop25.125 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.115 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hop23.631 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.777 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop24.523 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.975 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.127 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.799 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop29.731 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.635 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.533 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.669 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.542 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.192 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop4.225 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop2.823 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop23.568 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop25.028 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.799 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.670 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.828 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.886 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop22.963 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.952 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.176 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 6

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.589 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop187.351 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.903 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop8.189 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.915 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.134 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 6

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.253 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop7.774 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.704 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.893 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.141 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.147 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.891 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.148 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.812 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.144 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.901 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop7.393 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.174 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop8.686 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.117 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

TCP traceroute / 443 · Recorded address 5

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.252 msAS8002 · Stealth0.402 msAS8002 · StealthSame responder
2No reply3.829 msAS8075 · MicrosoftNot established
3No replyNo replyNot established
423.559 msAS8075 · MicrosoftNo replyNot established
523.478 msAS8075 · MicrosoftNo replyNot established
623.353 msAS8075 · Microsoft25.125 msAS8075 · MicrosoftDifferent responders
723.327 msAS8075 · Microsoft23.115 msAS8075 · MicrosoftDifferent responders
8No replyNo replyNot established
923.717 msAS8075 · Microsoft23.631 msAS8075 · MicrosoftDifferent responders
1019.873 msAS8075 · Microsoft19.777 msAS8075 · MicrosoftDifferent responders
1122.885 msAS8075 · Microsoft24.523 msAS8075 · MicrosoftDifferent responders
12No replyNo replyNot established
1323.067 msAS8075 · Microsoft22.975 msAS8075 · MicrosoftSame responder

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.722 msUsual round trip before the event
Last recorded event RTT6.742 msLast successful event recording
Event p95 RTT22.947 ms95th percentile of successful recordings
Change from baseline+0.020 msLast event RTT compared with the baseline
Successful / expected recordings130 / 130Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology