Root cause analysis / Investigation

copilot.com

Reference RCA-B0D2D2AE7C9C3E20

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

06 Nov 2026 14:40 – 06 Nov 2026 18:44 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.640 ms
6.653 ms
6.641 ms
6.640 ms
6.654 ms
6.636 ms
6.652 ms
6.623 ms
6.638 ms
6.636 ms
6.690 ms
6.735 ms
6.716 ms
6.663 ms
6.561 ms
6.523 ms
6.549 ms
6.543 ms
6.531 ms
6.516 ms
6.515 ms
6.830 ms
6.801 ms
6.802 ms
6.892 ms
6.812 ms
6.819 ms
6.950 ms
6.638 ms
6.682 ms
6.635 ms
6.659 ms
6.720 ms
6.686 ms
6.652 ms
6.627 ms
6.640 ms
6.651 ms
6.672 ms
6.633 ms
6.633 ms
6.647 ms
6.640 ms
6.631 ms
6.671 ms
6.673 ms
6.669 ms
6.657 ms
6.665 ms
6.392 ms
6.422 ms
6.384 ms
6.421 ms
6.394 ms
6.445 ms
6.406 ms
6.415 ms
6.452 ms
6.395 ms
6.384 ms
6.384 ms
6.415 ms
6.434 ms
6.395 ms
6.389 ms
6.390 ms
6.427 ms
6.388 ms
6.435 ms
6.444 ms
6.427 ms
6.392 ms
6.388 ms
6.401 ms
6.386 ms
6.397 ms
6.403 ms
6.453 ms
6.424 ms
6.419 ms
6.412 ms
6.397 ms
6.412 ms
6.408 ms
6.387 ms
6.473 ms
6.421 ms
6.465 ms
6.431 ms
6.396 ms
6.393 ms
6.385 ms
6.381 ms
6.458 ms
6.408 ms
6.433 ms
6.391 ms
6.433 ms
6.399 ms
6.401 ms
6.390 ms
6.398 ms
6.401 ms
6.381 ms
6.392 ms
6.441 ms
6.426 ms
6.406 ms
6.415 ms
6.394 ms
6.394 ms
6.393 ms
6.405 ms
6.391 ms
6.470 ms
6.484 ms
6.391 ms
6.415 ms
6.412 ms
6.417 ms
6.401 ms
6.554 ms
6.389 ms
22.852 ms
22.906 ms
22.804 ms
22.840 ms
22.836 ms
22.903 ms
22.854 ms
22.809 ms
22.860 ms
22.844 ms
22.836 ms
22.850 ms
22.886 ms
22.851 ms
22.819 ms
22.872 ms
22.855 ms
22.813 ms
22.831 ms
22.879 ms
22.835 ms
22.877 ms
22.871 ms
22.851 ms
22.872 ms
22.797 ms
22.873 ms
22.870 ms
22.885 ms
22.806 ms
22.815 ms
22.817 ms
23.105 ms
22.900 ms
22.891 ms
22.853 ms
22.820 ms
22.905 ms
22.869 ms
22.840 ms
6.719 ms
6.737 ms
6.709 ms
6.741 ms
7.002 ms
6.989 ms
6.990 ms
6.963 ms
6.953 ms
6.963 ms
7.038 ms
9.442 ms
7.003 ms
22.854 ms
22.881 ms
22.857 ms
22.834 ms
22.851 ms
22.923 ms
22.851 ms
22.808 ms
22.874 ms
22.842 ms
22.874 ms
22.845 ms
22.874 ms
22.836 ms
22.887 ms
22.846 ms
22.861 ms
22.803 ms
22.810 ms
22.814 ms
22.935 ms
22.882 ms
22.824 ms
22.832 ms
22.826 ms
22.853 ms
22.904 ms
22.836 ms
22.830 ms
22.873 ms
22.865 ms
22.829 ms
22.836 ms
22.852 ms
22.850 ms
22.799 ms
22.844 ms
22.870 ms
22.858 ms
22.899 ms
22.859 ms
22.895 ms
22.807 ms
22.869 ms
22.864 ms
22.837 ms
22.858 ms
22.778 ms
22.888 ms
6.784 ms
6.753 ms
6.771 ms
6.801 ms
6.825 ms
6.734 ms
6.741 ms
6.728 ms
6.746 ms
7.022 ms
6.779 ms
6.749 ms
6.720 ms
6.763 ms
6.730 ms
6.741 ms
6.737 ms
6.767 ms
6.751 ms
6.774 ms
6.775 ms
6.740 ms
6.730 ms
6.750 ms
6.737 ms
6.739 ms
6.765 ms
6.881 ms
6.865 ms
6.863 ms
6.834 ms
6.847 ms
6.864 ms
6.768 ms
6.774 ms
6.746 ms
6.747 ms
6.761 ms
6.739 ms
6.765 ms
6.829 ms
6.763 ms
6.748 ms
6.751 ms
6.290 ms
6.308 ms
6.301 ms
6.306 ms
6.289 ms
6.282 ms
6.352 ms
6.293 ms
6.325 ms
6.304 ms
6.322 ms
6.271 ms
6.316 ms
6.366 ms
6.288 ms
6.285 ms
6.316 ms
6.287 ms
6.326 ms
6.310 ms
6.283 ms
6.281 ms
6.426 ms
6.424 ms
6.391 ms
6.457 ms
6.397 ms
6.389 ms
6.401 ms
6.403 ms
6.422 ms
6.415 ms
6.387 ms
6.429 ms
6.386 ms
6.378 ms
6.406 ms
6.404 ms
6.392 ms
6.429 ms
6.448 ms
6.399 ms
6.418 ms
6.417 ms
6.412 ms
6.386 ms
6.389 ms
6.422 ms
6.409 ms
6.296 ms
6.321 ms
6.291 ms
6.323 ms
6.355 ms
6.318 ms
6.090 ms
6.087 ms
6.094 ms
6.160 ms
6.111 ms
6.083 ms
6.102 ms
6.123 ms
6.092 ms
6.071 ms
6.110 ms
6.186 ms
22.880 ms
22.929 ms
22.863 ms
22.997 ms
22.849 ms
22.826 ms
22.864 ms
22.836 ms
22.829 ms
22.813 ms
22.796 ms
22.807 ms
22.826 ms
22.814 ms
22.853 ms
22.806 ms
22.864 ms
22.879 ms
22.834 ms
22.870 ms
22.849 ms
22.839 ms
22.797 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.171 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.855 msReply RTT ASN unavailable
Before

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.430 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop7.673 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.843 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.120 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.178 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hop0.891 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.873 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.674 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.123 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.260 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.930 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.689 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.777 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.139 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.075 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.722 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.847 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.460 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.718 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.456 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.248 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.698 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hop23.694 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.930 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop22.898 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination23.418 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.124 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.150 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.981 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.548 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.120 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.287 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop4.890 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.502 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop8.543 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.079 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.172 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.517 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.136 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop29.659 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.208 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.599 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop6.876 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.958 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.735 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.124 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.148 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop25.895 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.285 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.029 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hop23.759 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop20.021 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop22.840 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.836 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 2

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.120 msAS8002 · Stealth0.123 msAS8002 · StealthSame responder
TCP traceroute / 443 · Recorded address 2

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.178 msAS8002 · Stealth0.260 msAS8002 · StealthSame responder
2No reply1.930 msAS8075 · MicrosoftNot established
30.891 msAS8075 · MicrosoftNo replyNot established
46.873 msAS8075 · MicrosoftNo replyNot established
5No replyNo replyNot established
6No reply7.689 msAS8075 · MicrosoftNot established
7No replyNo replyNot established
8No replyNo replyNot established
9No replyNo replyNot established
10No replyNo replyNot established
116.674 msAS8075 · MicrosoftNo replyNot established
12Not recorded6.777 msAS8075 · MicrosoftNot established

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.729 msUsual round trip before the event
Last recorded event RTT6.730 msLast successful event recording
Event p95 RTT22.904 ms95th percentile of successful recordings
Change from baseline+0.000 msLast event RTT compared with the baseline
Successful / expected recordings250 / 250Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology