Root cause analysis / Investigation

copilot.com

Reference RCA-91C8CC56929A1D11

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

05 Nov 2026 16:50 – 05 Nov 2026 20:14 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.452 ms
6.383 ms
6.414 ms
6.491 ms
6.405 ms
6.479 ms
6.385 ms
6.433 ms
6.384 ms
6.539 ms
6.463 ms
6.419 ms
6.543 ms
6.413 ms
6.428 ms
6.379 ms
6.549 ms
6.399 ms
6.431 ms
6.551 ms
6.458 ms
6.547 ms
6.644 ms
6.506 ms
6.502 ms
6.484 ms
6.385 ms
6.427 ms
6.389 ms
6.477 ms
6.732 ms
6.712 ms
6.756 ms
6.721 ms
6.798 ms
6.735 ms
6.741 ms
6.725 ms
6.789 ms
6.736 ms
6.760 ms
6.740 ms
6.742 ms
6.623 ms
6.637 ms
6.918 ms
6.644 ms
6.641 ms
6.636 ms
6.652 ms
6.649 ms
6.672 ms
6.676 ms
6.656 ms
6.637 ms
6.692 ms
6.630 ms
6.657 ms
6.647 ms
6.629 ms
6.687 ms
6.628 ms
6.638 ms
6.665 ms
6.660 ms
6.688 ms
6.633 ms
6.685 ms
6.680 ms
6.690 ms
6.698 ms
6.644 ms
6.642 ms
6.641 ms
6.698 ms
6.691 ms
6.640 ms
6.652 ms
6.641 ms
6.652 ms
6.635 ms
6.632 ms
6.678 ms
6.646 ms
6.645 ms
6.631 ms
6.665 ms
6.661 ms
6.684 ms
6.711 ms
6.662 ms
6.643 ms
6.654 ms
6.628 ms
6.692 ms
6.636 ms
6.644 ms
6.663 ms
6.668 ms
6.629 ms
6.710 ms
6.649 ms
6.674 ms
6.627 ms
6.629 ms
6.643 ms
6.671 ms
6.687 ms
6.624 ms
6.681 ms
6.671 ms
6.634 ms
6.632 ms
6.652 ms
6.674 ms
6.644 ms
6.660 ms
6.653 ms
6.664 ms
6.676 ms
6.646 ms
6.657 ms
6.632 ms
6.642 ms
6.651 ms
22.937 ms
22.860 ms
22.978 ms
22.995 ms
22.872 ms
22.957 ms
23.078 ms
22.873 ms
23.009 ms
23.053 ms
23.016 ms
22.946 ms
22.809 ms
23.054 ms
23.080 ms
22.937 ms
22.798 ms
22.856 ms
22.972 ms
22.831 ms
23.093 ms
23.105 ms
22.936 ms
22.860 ms
23.078 ms
22.904 ms
22.807 ms
22.831 ms
22.931 ms
22.905 ms
22.839 ms
21.156 ms
21.123 ms
21.176 ms
21.263 ms
21.072 ms
22.958 ms
22.930 ms
23.251 ms
22.904 ms
22.851 ms
22.843 ms
22.813 ms
23.073 ms
22.943 ms
22.847 ms
22.907 ms
22.956 ms
22.921 ms
22.882 ms
22.867 ms
22.839 ms
22.854 ms
23.000 ms
22.946 ms
22.817 ms
22.821 ms
22.851 ms
22.851 ms
22.841 ms
22.851 ms
22.833 ms
22.867 ms
22.854 ms
22.858 ms
22.792 ms
22.886 ms
22.838 ms
22.813 ms
22.822 ms
22.832 ms
22.875 ms
22.962 ms
22.932 ms
22.852 ms
22.938 ms
22.859 ms
22.873 ms
22.834 ms
22.855 ms
22.861 ms
22.870 ms
22.852 ms
22.877 ms
22.853 ms
22.835 ms
22.824 ms
22.867 ms
22.848 ms
22.859 ms
22.833 ms
6.696 ms
6.693 ms
6.667 ms
6.719 ms
6.668 ms
6.658 ms
6.660 ms
6.690 ms
6.655 ms
6.695 ms
6.661 ms
6.713 ms
6.667 ms
6.689 ms
6.701 ms
6.783 ms
6.672 ms
6.698 ms
6.676 ms
6.692 ms
6.657 ms
6.653 ms
6.673 ms
6.650 ms
6.675 ms
6.660 ms
6.694 ms
6.685 ms
6.674 ms
6.718 ms
6.678 ms
6.697 ms
6.671 ms
6.667 ms
6.671 ms
6.716 ms
6.672 ms
6.672 ms
6.716 ms
6.738 ms
6.681 ms
6.800 ms
6.703 ms
6.669 ms
6.676 ms
6.709 ms
6.662 ms
6.716 ms
6.668 ms
6.694 ms
6.684 ms
6.714 ms
6.695 ms
6.687 ms
6.686 ms
6.708 ms
6.654 ms
6.715 ms
6.754 ms
6.728 ms
6.727 ms
6.740 ms
6.713 ms
6.717 ms
6.714 ms
6.704 ms
6.866 ms
6.693 ms
6.710 ms
6.755 ms
6.717 ms
6.706 ms
6.719 ms
6.688 ms
6.709 ms
6.720 ms
6.743 ms
6.737 ms
6.721 ms
6.694 ms
6.709 ms
6.732 ms
6.736 ms
6.756 ms
6.724 ms
6.693 ms
6.745 ms
6.719 ms
6.740 ms
6.695 ms
6.717 ms
6.710 ms
6.704 ms
6.702 ms
6.710 ms
6.688 ms
6.712 ms
6.704 ms
6.728 ms
6.723 ms
6.779 ms
6.702 ms
6.718 ms
6.768 ms
6.720 ms
6.754 ms
6.711 ms
6.718 ms
6.745 ms
6.741 ms
6.736 ms
6.716 ms
6.711 ms
6.774 ms
6.740 ms
6.723 ms
6.698 ms
6.728 ms
6.743 ms
6.715 ms
6.742 ms
6.724 ms
6.708 ms
6.732 ms
6.706 ms
6.748 ms
6.713 ms
6.707 ms
6.732 ms
6.741 ms
6.748 ms
6.711 ms
6.642 ms
6.642 ms
6.619 ms
6.607 ms
6.607 ms
6.618 ms
6.605 ms
6.735 ms
6.713 ms
6.708 ms
6.708 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.112 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.205 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop4.442 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.027 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.547 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop96.191 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.031 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.038 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.114 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.201 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop2.315 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop7.698 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.725 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.449 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.981 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.134 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.897 msReply RTT ASN unavailable
During

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.220 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.966 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.771 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.805 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.132 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.160 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop172.088 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.830 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.903 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.160 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.821 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop20.011 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop22.911 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination30.735 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.127 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.280 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop7.990 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.530 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.963 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.144 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.153 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.016 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.777 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.128 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.913 msReply RTT ASN unavailable
After

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.575 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop6.224 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination7.255 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.120 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.170 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop132.199 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.552 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.455 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop6.851 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.913 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 3

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.114 msAS8002 · Stealth0.134 msAS8002 · StealthSame responder
2Not recorded0.897 msNot established
TCP traceroute / 443 · Recorded address 3

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.201 msAS8002 · Stealth0.220 msAS8002 · StealthSame responder
22.315 msAS8075 · MicrosoftNo replyNot established
37.698 msAS8075 · MicrosoftNo replyNot established
46.725 msAS8075 · Microsoft6.966 msAS8075 · MicrosoftDifferent responders
57.449 msAS8075 · MicrosoftNo replyNot established
6No reply7.771 msAS8075 · MicrosoftNot established
7No replyNo replyNot established
8No replyNo replyNot established
9No replyNo replyNot established
10No replyNo replyNot established
116.981 msAS8075 · Microsoft6.805 msAS8075 · MicrosoftSame responder

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.766 msUsual round trip before the event
Last recorded event RTT6.650 msLast successful event recording
Event p95 RTT23.053 ms95th percentile of successful recordings
Change from baseline-0.116 msLast event RTT compared with the baseline
Successful / expected recordings170 / 170Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology