Start an order
Root cause analysis / Investigation

copilot.com

Reference RCA-7B092812D460601D

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.
Successful RTT recording Event interval

28 Oct 2026 01:05 – 28 Oct 2026 03:59 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings.
Recorded at (UTC)RTT
22.903 ms
22.956 ms
22.875 ms
22.892 ms
22.887 ms
6.356 ms
6.295 ms
6.248 ms
6.298 ms
6.323 ms
6.341 ms
6.287 ms
6.255 ms
6.282 ms
6.252 ms
6.281 ms
6.265 ms
6.287 ms
6.285 ms
6.301 ms
6.290 ms
6.398 ms
6.260 ms
6.308 ms
6.302 ms
6.363 ms
6.265 ms
6.281 ms
6.297 ms
6.296 ms
6.281 ms
6.279 ms
6.319 ms
6.263 ms
6.252 ms
6.299 ms
6.290 ms
6.261 ms
6.321 ms
6.341 ms
6.266 ms
6.277 ms
6.285 ms
6.283 ms
6.289 ms
6.273 ms
6.274 ms
6.258 ms
6.308 ms
6.284 ms
6.301 ms
6.273 ms
6.300 ms
6.301 ms
6.261 ms
6.281 ms
6.308 ms
6.268 ms
6.279 ms
6.361 ms
6.373 ms
6.273 ms
6.306 ms
6.360 ms
6.283 ms
6.267 ms
6.304 ms
6.270 ms
6.288 ms
6.271 ms
6.264 ms
6.269 ms
6.252 ms
6.288 ms
6.274 ms
6.274 ms
6.295 ms
6.279 ms
6.303 ms
6.309 ms
6.260 ms
6.266 ms
6.279 ms
6.335 ms
6.359 ms
6.268 ms
6.293 ms
6.285 ms
6.254 ms
6.312 ms
6.260 ms
6.384 ms
6.283 ms
6.333 ms
6.275 ms
6.257 ms
6.264 ms
6.273 ms
6.255 ms
6.289 ms
6.304 ms
6.263 ms
6.248 ms
6.276 ms
6.292 ms
6.274 ms
6.311 ms
6.320 ms
6.329 ms
6.265 ms
6.264 ms
6.316 ms
6.261 ms
6.320 ms
6.276 ms
6.308 ms
6.297 ms
6.258 ms
6.683 ms
6.798 ms
9.074 ms
6.665 ms
6.708 ms
6.706 ms
6.596 ms
6.560 ms
6.606 ms
6.602 ms
6.566 ms
21.203 ms
22.856 ms
22.853 ms
22.867 ms
22.878 ms
22.881 ms
22.965 ms
22.900 ms
22.883 ms
22.892 ms
22.950 ms
22.881 ms
22.934 ms
22.875 ms
22.888 ms
22.884 ms
22.954 ms
22.857 ms
22.857 ms
22.909 ms
22.869 ms
22.888 ms
22.862 ms
22.943 ms
22.925 ms
22.852 ms
22.910 ms
23.301 ms
22.946 ms
22.906 ms
22.915 ms
22.950 ms
22.939 ms
22.873 ms
22.904 ms
22.868 ms
22.923 ms
22.926 ms
22.953 ms
22.896 ms
22.916 ms
22.836 ms
22.855 ms
22.910 ms
22.839 ms
22.862 ms
22.876 ms
22.859 ms
22.907 ms
22.800 ms
22.934 ms
22.929 ms
22.870 ms
22.952 ms
22.879 ms
22.863 ms
22.887 ms
22.826 ms
22.908 ms
22.884 ms
22.922 ms
22.936 ms
22.875 ms
22.871 ms
22.922 ms
22.894 ms
6.730 ms
6.783 ms
6.757 ms
6.741 ms
6.763 ms
6.695 ms
6.764 ms
6.774 ms
6.734 ms
7.073 ms
6.843 ms
6.723 ms
6.729 ms
6.777 ms
6.815 ms
6.781 ms
6.779 ms
6.732 ms
6.737 ms
6.756 ms
6.919 ms
6.730 ms
6.882 ms
6.742 ms
6.752 ms
6.728 ms
6.789 ms
6.750 ms
6.748 ms
6.761 ms
6.772 ms
6.728 ms
6.742 ms
6.751 ms
6.733 ms
6.779 ms
6.738 ms
6.734 ms
6.740 ms
6.757 ms
6.807 ms
6.724 ms
6.748 ms
6.791 ms
6.784 ms
6.897 ms
6.796 ms
6.715 ms
6.725 ms
6.771 ms
6.766 ms
6.771 ms
6.736 ms
6.797 ms
6.789 ms
6.744 ms
6.719 ms
6.726 ms
6.746 ms
6.769 ms
6.772 ms
6.759 ms
6.725 ms
6.736 ms
6.781 ms
6.765 ms
6.731 ms
6.741 ms
6.792 ms
6.768 ms
6.750 ms
6.794 ms
6.750 ms
6.739 ms
6.735 ms
6.767 ms
6.779 ms
6.755 ms
6.730 ms
6.776 ms
6.793 ms
6.761 ms
6.733 ms
6.739 ms
6.761 ms
6.751 ms
6.712 ms
6.778 ms
6.805 ms
6.766 ms
6.737 ms
6.764 ms
6.730 ms
6.765 ms
6.749 ms
6.739 ms
6.747 ms
6.743 ms
6.892 ms
6.910 ms
6.872 ms
6.778 ms
6.760 ms
6.758 ms
6.790 ms
6.746 ms
6.753 ms
6.908 ms
6.897 ms
6.856 ms
6.929 ms
6.865 ms
7.036 ms
6.883 ms
6.771 ms
6.766 ms
6.572 ms
6.570 ms
6.652 ms
6.597 ms
6.577 ms
6.538 ms
6.545 ms
6.538 ms
6.590 ms
6.558 ms
6.686 ms
6.668 ms
6.636 ms
6.644 ms
6.695 ms
6.663 ms
6.731 ms
6.679 ms
6.815 ms
6.856 ms
6.663 ms
6.696 ms
6.674 ms
6.551 ms
6.553 ms
6.536 ms
6.608 ms
6.569 ms
6.509 ms
6.582 ms
6.716 ms
6.663 ms
6.682 ms
6.724 ms
6.671 ms
6.660 ms
6.656 ms
6.683 ms
Network path / recorded observations

Network path observations.

17 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.139 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop47.507 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 7

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.170 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop14.656 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.600 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.604 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.919 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.775 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hop23.822 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop97.156 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop23.150 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination23.232 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.130 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.217 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop3.331 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.103 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.005 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.669 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.632 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.159 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.962 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.608 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.503 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.304 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.500 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.121 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.006 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.145 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.953 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.976 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.180 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.612 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.127 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.042 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 7

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.181 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop2.939 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.630 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.472 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.460 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop25.052 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.647 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop23.420 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.728 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.873 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop23.159 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.919 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.162 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.149 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.009 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop33.804 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.148 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.520 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.125 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.619 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.156 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.982 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.004 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.657 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.899 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.844 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.010 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.137 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.161 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop6.116 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.748 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop6.464 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop6.165 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.963 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 8

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.156 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.059 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 6

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.156 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop2.706 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.816 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.975 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.636 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 5

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.130 msAS8002 · Stealth0.162 msAS8002 · StealthSame responder
TCP traceroute / 443 · Recorded address 1

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.159 msAS8002 · Stealth0.145 msAS8002 · StealthSame responder
20.962 msAS8075 · MicrosoftNo replyNot established
3No replyNo replyNot established
46.608 msAS8075 · Microsoft6.953 msAS8075 · MicrosoftDifferent responders
57.503 msAS8075 · Microsoft7.976 msAS8075 · MicrosoftDifferent responders
67.304 msAS8075 · Microsoft7.180 msAS8075 · MicrosoftDifferent responders
7No replyNo replyNot established
8No replyNo replyNot established
9No replyNo replyNot established
10No replyNo replyNot established
116.500 msAS8075 · Microsoft6.612 msAS8075 · MicrosoftSame responder
TCP traceroute / 443 · Recorded address 7

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.170 msAS8002 · Stealth0.181 msAS8002 · StealthSame responder
2No reply2.939 msAS8075 · MicrosoftNot established
314.656 msAS8075 · Microsoft1.630 msAS8075 · MicrosoftSame responder
423.600 msAS8075 · Microsoft23.472 msAS8075 · MicrosoftSame responder
523.604 msAS8075 · Microsoft23.460 msAS8075 · MicrosoftSame responder
624.919 msAS8075 · Microsoft25.052 msAS8075 · MicrosoftSame responder
723.775 msAS8075 · Microsoft24.647 msAS8075 · MicrosoftSame responder
8No reply23.420 msAS8075 · MicrosoftNot established
923.822 msAS8075 · Microsoft23.728 msAS8075 · MicrosoftSame responder
1097.156 msAS8075 · Microsoft19.873 msAS8075 · MicrosoftSame responder
1123.150 msAS8075 · Microsoft23.159 msAS8075 · MicrosoftSame responder
12No replyNo replyNot established
1323.232 msAS8075 · Microsoft22.919 msAS8075 · MicrosoftSame responder

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.704 msUsual round trip before the event
Last recorded event RTT6.733 msLast successful event recording
Event p95 RTT22.950 ms95th percentile of successful recordings
Change from baseline+0.030 msLast event RTT compared with the baseline
Successful / expected recordings110 / 110Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology