Root cause analysis / Investigation

copilot.com

Reference RCA-99AB5A1E84B2478C

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

02 Nov 2026 22:40 – 03 Nov 2026 07:54 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.546 ms
6.500 ms
6.399 ms
6.387 ms
6.462 ms
6.489 ms
6.517 ms
6.399 ms
6.558 ms
6.428 ms
6.414 ms
6.374 ms
6.408 ms
6.493 ms
6.627 ms
6.436 ms
6.453 ms
6.403 ms
6.632 ms
6.411 ms
6.478 ms
6.415 ms
6.424 ms
6.442 ms
6.389 ms
6.379 ms
6.465 ms
6.515 ms
6.388 ms
6.426 ms
6.414 ms
6.381 ms
6.387 ms
6.448 ms
6.389 ms
6.551 ms
6.370 ms
6.471 ms
6.395 ms
6.461 ms
6.456 ms
6.451 ms
6.369 ms
6.294 ms
6.374 ms
6.283 ms
6.320 ms
6.359 ms
6.384 ms
6.339 ms
6.358 ms
6.417 ms
6.428 ms
6.338 ms
6.297 ms
6.352 ms
6.398 ms
6.312 ms
6.288 ms
6.464 ms
6.289 ms
6.294 ms
6.436 ms
6.327 ms
6.275 ms
6.294 ms
6.359 ms
6.357 ms
6.978 ms
6.298 ms
6.346 ms
6.279 ms
6.279 ms
6.309 ms
6.270 ms
6.304 ms
6.336 ms
6.301 ms
6.447 ms
6.303 ms
6.295 ms
6.307 ms
6.288 ms
6.287 ms
6.305 ms
6.302 ms
6.358 ms
6.281 ms
6.337 ms
6.270 ms
6.319 ms
6.347 ms
6.340 ms
6.305 ms
6.267 ms
6.268 ms
6.313 ms
6.288 ms
6.302 ms
6.292 ms
6.319 ms
6.291 ms
6.342 ms
6.309 ms
6.346 ms
6.275 ms
6.283 ms
6.355 ms
6.289 ms
6.298 ms
6.289 ms
6.980 ms
6.281 ms
6.397 ms
6.410 ms
6.332 ms
6.308 ms
6.303 ms
6.284 ms
6.357 ms
6.453 ms
22.846 ms
22.841 ms
22.860 ms
22.923 ms
22.821 ms
22.838 ms
22.854 ms
22.813 ms
22.860 ms
23.052 ms
22.813 ms
22.841 ms
22.826 ms
22.851 ms
22.875 ms
22.897 ms
22.870 ms
22.831 ms
22.848 ms
22.518 ms
22.872 ms
22.858 ms
22.850 ms
22.401 ms
22.853 ms
22.416 ms
22.859 ms
22.895 ms
22.895 ms
22.881 ms
22.847 ms
22.882 ms
22.829 ms
22.877 ms
22.859 ms
22.801 ms
22.831 ms
22.848 ms
22.840 ms
22.837 ms
22.796 ms
22.804 ms
22.839 ms
22.878 ms
22.851 ms
22.850 ms
22.835 ms
22.902 ms
22.825 ms
22.402 ms
21.953 ms
22.864 ms
22.834 ms
22.827 ms
22.839 ms
22.409 ms
22.830 ms
22.857 ms
22.410 ms
22.915 ms
21.894 ms
22.896 ms
22.868 ms
22.855 ms
22.866 ms
22.883 ms
22.857 ms
22.809 ms
22.854 ms
22.829 ms
22.864 ms
22.380 ms
22.836 ms
22.855 ms
22.845 ms
22.884 ms
22.883 ms
22.875 ms
22.385 ms
22.882 ms
22.891 ms
21.174 ms
6.746 ms
6.766 ms
6.741 ms
21.136 ms
22.797 ms
22.838 ms
22.843 ms
22.825 ms
22.850 ms
22.880 ms
22.828 ms
22.842 ms
22.900 ms
22.866 ms
23.057 ms
22.899 ms
22.868 ms
22.831 ms
22.822 ms
22.829 ms
22.877 ms
22.885 ms
22.861 ms
22.896 ms
22.825 ms
22.403 ms
22.848 ms
20.707 ms
21.160 ms
21.080 ms
6.668 ms
6.765 ms
6.764 ms
6.752 ms
6.779 ms
6.751 ms
6.730 ms
6.759 ms
6.723 ms
6.798 ms
6.749 ms
6.739 ms
6.729 ms
6.740 ms
6.759 ms
6.752 ms
6.774 ms
6.738 ms
6.736 ms
6.734 ms
6.759 ms
6.738 ms
6.717 ms
6.748 ms
6.750 ms
6.733 ms
6.744 ms
6.725 ms
6.756 ms
6.765 ms
6.731 ms
6.775 ms
6.730 ms
6.782 ms
6.741 ms
6.715 ms
6.753 ms
6.732 ms
6.791 ms
6.760 ms
6.761 ms
6.735 ms
6.746 ms
6.760 ms
8.620 ms
6.733 ms
6.736 ms
6.744 ms
6.745 ms
6.747 ms
6.760 ms
6.732 ms
6.726 ms
6.748 ms
6.743 ms
6.725 ms
6.728 ms
6.714 ms
6.758 ms
6.746 ms
6.716 ms
6.731 ms
6.747 ms
6.771 ms
6.730 ms
6.726 ms
6.771 ms
6.770 ms
6.729 ms
6.753 ms
6.726 ms
6.738 ms
6.743 ms
6.737 ms
6.741 ms
6.428 ms
6.402 ms
6.393 ms
6.400 ms
6.435 ms
6.448 ms
6.402 ms
6.384 ms
6.412 ms
6.385 ms
6.399 ms
6.410 ms
6.455 ms
6.400 ms
6.422 ms
6.408 ms
6.411 ms
6.304 ms
6.288 ms
6.286 ms
6.304 ms
6.328 ms
6.319 ms
6.372 ms
6.374 ms
6.393 ms
6.388 ms
6.385 ms
6.397 ms
6.392 ms
6.407 ms
6.402 ms
6.406 ms
6.462 ms
6.397 ms
6.397 ms
6.387 ms
6.400 ms
6.305 ms
6.276 ms
6.309 ms
6.287 ms
6.282 ms
6.274 ms
6.297 ms
6.394 ms
6.452 ms
6.385 ms
6.397 ms
6.466 ms
6.382 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.115 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.814 msReply RTT ASN unavailable
Before

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.196 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop36.821 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.106 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.010 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.477 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.157 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop66.225 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.167 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop1.008 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.635 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.834 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.144 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.343 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.611 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.743 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.824 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.273 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop13.262 msReply RTT ASN unavailable
  3. TTL 3 Probe hop1.263 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.619 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop24.047 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.526 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop25.023 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop25.080 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.802 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop50.193 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop23.005 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.165 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.043 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop23.444 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop155.326 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.814 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.300 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.250 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.513 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop20.128 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop88.665 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.900 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.131 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.498 msReply RTT ASN unavailable
During

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.170 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.011 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.600 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.099 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.551 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.016 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.125 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.811 msReply RTT ASN unavailable
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.204 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop214.442 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop8.465 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.150 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.623 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.120 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.801 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.632 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.268 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.231 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.044 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.143 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.451 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.408 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.165 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.362 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop8.731 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.611 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.149 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop15.082 msReply RTT ASN unavailable
  3. TTL 3 Probe hop2.431 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.203 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop3.880 msReply RTT ASN unavailable
  3. TTL 3 Probe hop0.807 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.286 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.261 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.536 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.748 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.768 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 3

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.157 msAS8002 · Stealth0.144 msAS8002 · StealthSame responder
266.225 msAS8075 · MicrosoftNot recordedNot established
TCP traceroute / 443 · Recorded address 3

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.167 msAS8002 · Stealth0.343 msAS8002 · StealthSame responder
2No replyNo replyNot established
31.008 msAS8075 · MicrosoftNo replyNot established
46.635 msAS8075 · Microsoft6.611 msAS8075 · MicrosoftSame responder
5No replyNo replyNot established
6No reply7.743 msAS8075 · MicrosoftNot established
7No replyNo replyNot established
8No replyNo replyNot established
9No replyNo replyNot established
10No replyNo replyNot established
116.834 msAS8075 · Microsoft6.824 msAS8075 · MicrosoftSame responder

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.729 msUsual round trip before the event
Last recorded event RTT6.730 msLast successful event recording
Event p95 RTT22.918 ms95th percentile of successful recordings
Change from baseline+0.001 msLast event RTT compared with the baseline
Successful / expected recordings870 / 870Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology