Root cause analysis / Investigation

copilot.com

Reference RCA-ACD110680DF88E94

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

09 Nov 2026 18:10 – 09 Nov 2026 21:19 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.286 ms
6.284 ms
6.354 ms
6.291 ms
6.478 ms
6.280 ms
6.386 ms
6.348 ms
6.299 ms
6.307 ms
6.288 ms
6.344 ms
6.350 ms
6.402 ms
6.438 ms
6.404 ms
6.404 ms
6.400 ms
6.564 ms
6.409 ms
6.595 ms
6.392 ms
6.373 ms
6.496 ms
6.363 ms
6.268 ms
6.405 ms
6.281 ms
6.387 ms
6.387 ms
6.399 ms
6.722 ms
6.588 ms
6.710 ms
6.658 ms
6.579 ms
6.579 ms
6.537 ms
6.649 ms
6.606 ms
6.633 ms
6.773 ms
6.645 ms
6.627 ms
6.803 ms
6.713 ms
6.574 ms
6.531 ms
6.535 ms
6.553 ms
6.755 ms
6.549 ms
6.750 ms
6.581 ms
6.611 ms
6.580 ms
6.573 ms
6.969 ms
6.609 ms
6.580 ms
6.542 ms
6.544 ms
6.541 ms
6.609 ms
6.543 ms
6.548 ms
6.576 ms
6.541 ms
6.630 ms
6.587 ms
6.541 ms
6.730 ms
6.626 ms
6.730 ms
6.806 ms
6.736 ms
6.790 ms
6.736 ms
6.782 ms
6.745 ms
6.725 ms
6.740 ms
6.763 ms
6.715 ms
6.765 ms
6.736 ms
6.744 ms
6.743 ms
6.736 ms
6.788 ms
6.789 ms
6.732 ms
6.775 ms
6.726 ms
6.753 ms
6.727 ms
6.761 ms
6.746 ms
6.746 ms
22.820 ms
22.817 ms
22.843 ms
22.886 ms
22.764 ms
22.816 ms
22.832 ms
22.844 ms
22.844 ms
22.820 ms
22.834 ms
22.828 ms
22.804 ms
22.912 ms
22.858 ms
22.822 ms
22.852 ms
22.859 ms
22.847 ms
22.879 ms
22.857 ms
22.848 ms
22.811 ms
22.914 ms
22.883 ms
22.970 ms
22.873 ms
22.839 ms
22.880 ms
22.849 ms
22.836 ms
22.799 ms
22.919 ms
22.902 ms
22.827 ms
22.823 ms
22.834 ms
22.854 ms
22.849 ms
22.843 ms
23.326 ms
22.826 ms
22.849 ms
22.815 ms
22.880 ms
22.831 ms
22.832 ms
22.825 ms
22.809 ms
22.835 ms
22.975 ms
22.825 ms
22.816 ms
22.839 ms
22.826 ms
22.795 ms
22.916 ms
22.800 ms
22.829 ms
22.792 ms
22.866 ms
22.847 ms
22.938 ms
22.818 ms
22.893 ms
22.784 ms
22.871 ms
22.948 ms
22.844 ms
22.839 ms
22.901 ms
22.797 ms
23.065 ms
22.872 ms
22.845 ms
22.859 ms
22.842 ms
22.869 ms
22.896 ms
22.848 ms
22.785 ms
22.791 ms
22.874 ms
22.851 ms
22.843 ms
22.814 ms
6.079 ms
6.115 ms
6.086 ms
6.068 ms
6.112 ms
6.062 ms
6.078 ms
6.089 ms
6.078 ms
6.072 ms
6.127 ms
6.069 ms
6.079 ms
6.086 ms
6.059 ms
6.067 ms
6.094 ms
6.072 ms
6.059 ms
6.065 ms
6.107 ms
6.104 ms
6.073 ms
6.083 ms
6.106 ms
6.092 ms
6.112 ms
6.083 ms
6.099 ms
6.112 ms
6.120 ms
6.132 ms
6.080 ms
6.060 ms
6.056 ms
6.100 ms
6.080 ms
6.068 ms
6.062 ms
6.112 ms
6.226 ms
6.100 ms
6.146 ms
6.093 ms
6.067 ms
6.110 ms
6.051 ms
6.063 ms
6.141 ms
6.081 ms
6.088 ms
6.080 ms
6.079 ms
6.349 ms
6.055 ms
6.092 ms
6.147 ms
6.089 ms
6.085 ms
6.072 ms
6.054 ms
6.092 ms
6.097 ms
6.070 ms
6.070 ms
6.074 ms
6.081 ms
6.087 ms
6.106 ms
6.079 ms
6.099 ms
6.087 ms
6.066 ms
6.120 ms
6.073 ms
6.071 ms
6.078 ms
6.100 ms
6.108 ms
6.052 ms
6.093 ms
6.066 ms
6.129 ms
6.099 ms
6.080 ms
6.085 ms
6.083 ms
6.088 ms
6.101 ms
6.128 ms
6.068 ms
6.087 ms
6.075 ms
6.730 ms
6.736 ms
6.750 ms
6.734 ms
6.743 ms
6.758 ms
6.739 ms
6.720 ms
6.721 ms
6.736 ms
6.737 ms
6.724 ms
6.740 ms
6.766 ms
6.743 ms
6.761 ms
6.717 ms
6.768 ms
6.740 ms
6.812 ms
6.746 ms
6.766 ms
6.744 ms
6.721 ms
6.772 ms
6.796 ms
6.817 ms
6.726 ms
6.768 ms
6.744 ms
6.757 ms
6.760 ms
6.733 ms
6.780 ms
6.751 ms
6.813 ms
6.798 ms
6.736 ms
6.756 ms
6.720 ms
6.740 ms
6.801 ms
6.813 ms
6.783 ms
6.736 ms
6.743 ms
6.725 ms
6.724 ms
6.800 ms
6.764 ms
6.797 ms
6.769 ms
6.750 ms
6.721 ms
6.709 ms
6.723 ms
6.726 ms
6.726 ms
6.742 ms
Network path / recorded observations

Network path observations.

18 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.141 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.209 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop3.141 msReply RTT ASN unavailable
  3. TTL 3 Probe hop9.258 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.239 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.428 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.542 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.149 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.062 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop0.975 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.157 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.929 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.506 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.113 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.160 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.162 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop100.399 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop6.520 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.507 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.117 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.012 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 6

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.145 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop25.368 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.775 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.461 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hop23.658 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop20.133 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop23.012 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination25.512 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 6

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.123 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 6

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.209 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop1.659 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop24.007 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop74.506 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.826 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop23.061 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.741 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.835 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop22.829 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.836 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.188 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.149 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.542 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.368 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.164 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.220 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.517 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.117 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.860 msReply RTT ASN unavailable
After

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.140 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop0.899 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.133 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.223 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.210 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop7.062 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop5.855 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.759 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.123 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.162 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.169 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop0.886 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.894 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop8.281 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.818 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

No same-address, same-method pair is available among the selected replay samples. This does not mean no other matching traces were recorded.

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.713 msUsual round trip before the event
Last recorded event RTT6.080 msLast successful event recording
Event p95 RTT22.920 ms95th percentile of successful recordings
Change from baseline-0.633 msLast event RTT compared with the baseline
Successful / expected recordings139 / 140Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology