Root cause analysis / Investigation

copilot.com

Reference RCA-820A68EDB74E9550

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

28 Oct 2026 04:30 – 28 Oct 2026 07:54 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.672 ms
6.670 ms
6.656 ms
6.664 ms
6.654 ms
6.645 ms
6.666 ms
6.682 ms
6.648 ms
6.645 ms
6.655 ms
6.688 ms
6.672 ms
6.636 ms
6.703 ms
6.861 ms
6.881 ms
6.891 ms
6.930 ms
7.013 ms
6.864 ms
6.910 ms
6.944 ms
6.878 ms
6.895 ms
6.890 ms
6.847 ms
6.915 ms
6.860 ms
6.893 ms
6.918 ms
6.922 ms
6.883 ms
6.989 ms
6.752 ms
6.771 ms
6.755 ms
6.738 ms
6.768 ms
6.739 ms
6.743 ms
6.748 ms
6.772 ms
6.764 ms
6.740 ms
6.789 ms
6.751 ms
6.821 ms
6.803 ms
6.727 ms
7.064 ms
6.764 ms
6.775 ms
6.850 ms
6.800 ms
6.781 ms
6.890 ms
6.734 ms
6.792 ms
6.746 ms
6.755 ms
6.738 ms
6.743 ms
6.780 ms
6.818 ms
6.783 ms
6.901 ms
6.911 ms
6.874 ms
6.901 ms
6.884 ms
6.874 ms
6.910 ms
6.866 ms
6.905 ms
6.911 ms
6.897 ms
6.890 ms
6.903 ms
6.760 ms
6.748 ms
6.750 ms
6.755 ms
6.724 ms
6.748 ms
6.853 ms
6.871 ms
6.937 ms
6.912 ms
6.931 ms
6.860 ms
6.902 ms
6.856 ms
6.888 ms
6.935 ms
6.911 ms
6.868 ms
6.883 ms
6.850 ms
6.778 ms
6.781 ms
22.926 ms
22.879 ms
22.904 ms
22.910 ms
6.756 ms
6.772 ms
6.797 ms
6.758 ms
6.744 ms
6.739 ms
6.775 ms
6.805 ms
6.780 ms
6.732 ms
6.757 ms
6.754 ms
6.942 ms
6.869 ms
6.896 ms
6.868 ms
22.866 ms
22.903 ms
22.892 ms
22.889 ms
22.896 ms
22.873 ms
22.913 ms
22.940 ms
22.922 ms
22.928 ms
22.882 ms
22.912 ms
22.900 ms
22.848 ms
22.964 ms
22.956 ms
22.875 ms
22.948 ms
22.939 ms
22.898 ms
21.268 ms
21.159 ms
21.180 ms
21.206 ms
21.120 ms
21.220 ms
21.169 ms
21.116 ms
21.151 ms
21.165 ms
21.189 ms
21.175 ms
21.195 ms
21.115 ms
21.192 ms
21.152 ms
21.164 ms
21.194 ms
22.913 ms
22.984 ms
22.892 ms
22.915 ms
22.905 ms
22.966 ms
22.917 ms
22.892 ms
22.967 ms
22.934 ms
22.923 ms
22.927 ms
22.928 ms
22.898 ms
22.952 ms
22.924 ms
22.904 ms
22.872 ms
22.945 ms
22.925 ms
22.892 ms
22.936 ms
22.958 ms
22.901 ms
22.910 ms
22.974 ms
22.927 ms
22.906 ms
22.918 ms
22.442 ms
22.410 ms
22.520 ms
22.464 ms
22.426 ms
22.467 ms
22.537 ms
22.439 ms
22.475 ms
22.434 ms
22.917 ms
22.911 ms
22.889 ms
22.962 ms
22.884 ms
22.890 ms
22.943 ms
22.924 ms
22.876 ms
22.903 ms
22.951 ms
22.884 ms
22.930 ms
22.891 ms
22.888 ms
22.874 ms
6.404 ms
6.400 ms
6.414 ms
6.409 ms
6.392 ms
6.387 ms
6.402 ms
6.394 ms
6.404 ms
6.400 ms
6.399 ms
6.428 ms
6.382 ms
6.434 ms
6.392 ms
6.417 ms
6.431 ms
6.418 ms
6.392 ms
6.440 ms
6.393 ms
6.391 ms
6.378 ms
6.400 ms
6.404 ms
6.429 ms
6.439 ms
6.406 ms
6.402 ms
6.446 ms
6.413 ms
6.440 ms
6.388 ms
6.404 ms
6.473 ms
6.417 ms
6.429 ms
6.773 ms
6.324 ms
6.305 ms
6.290 ms
6.255 ms
6.274 ms
6.304 ms
6.290 ms
6.272 ms
6.247 ms
6.261 ms
6.296 ms
6.312 ms
6.286 ms
6.281 ms
6.299 ms
6.279 ms
6.288 ms
6.295 ms
6.265 ms
6.272 ms
6.268 ms
6.311 ms
6.260 ms
6.271 ms
6.359 ms
6.269 ms
6.261 ms
6.282 ms
6.283 ms
6.274 ms
6.294 ms
6.321 ms
6.328 ms
6.301 ms
6.267 ms
6.300 ms
6.262 ms
6.285 ms
6.312 ms
6.302 ms
6.262 ms
6.253 ms
6.269 ms
6.303 ms
6.320 ms
6.310 ms
6.305 ms
6.297 ms
6.702 ms
6.676 ms
6.730 ms
6.673 ms
6.666 ms
6.683 ms
6.663 ms
6.726 ms
6.661 ms
6.677 ms
6.673 ms
6.676 ms
6.678 ms
6.669 ms
6.674 ms
6.690 ms
6.650 ms
6.670 ms
6.713 ms
6.681 ms
6.724 ms
6.676 ms
6.671 ms
6.673 ms
6.683 ms
6.728 ms
6.676 ms
6.711 ms
6.682 ms
6.714 ms
6.698 ms
6.734 ms
6.718 ms
6.697 ms
6.725 ms
6.699 ms
6.680 ms
6.676 ms
6.714 ms
6.668 ms
6.676 ms
6.692 ms
6.661 ms
6.686 ms
6.677 ms
6.659 ms
6.664 ms
6.677 ms
6.663 ms
6.672 ms
6.659 ms
6.671 ms
6.668 ms
6.697 ms
6.685 ms
6.691 ms
6.922 ms
6.893 ms
6.893 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 9

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.131 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.051 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 7

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.143 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.068 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.681 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.098 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.335 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop6.059 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.623 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.120 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.302 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop0.931 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.496 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.659 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop6.900 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.477 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.193 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 8

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.218 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.814 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.254 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.787 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.312 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.844 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.687 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hop23.784 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.896 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop22.947 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination24.169 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.139 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.185 msReply RTT ASN unavailable
  3. TTL 3 Probe hop0.828 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop36.744 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.549 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.408 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop6.764 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 8

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.162 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.879 msReply RTT ASN unavailable
  3. TTL 3 Probe hop1.482 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.423 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop166.600 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.968 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.706 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.603 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.748 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.891 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop86.278 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.978 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.124 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.239 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.203 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.788 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop13.597 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.127 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop5.921 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.477 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.149 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop15.825 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.170 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.160 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.825 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.514 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.124 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.169 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.141 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.769 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.163 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.598 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.309 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop6.573 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.671 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.132 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.634 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.142 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop4.287 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop2.918 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop35.773 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.731 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.812 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.111 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 2

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.120 msAS8002 · Stealth0.193 msAS8002 · StealthSame responder

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.718 msUsual round trip before the event
Last recorded event RTT6.429 msLast successful event recording
Event p95 RTT22.963 ms95th percentile of successful recordings
Change from baseline-0.289 msLast event RTT compared with the baseline
Successful / expected recordings170 / 170Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology