Root cause analysis / Investigation

copilot.com

Reference RCA-E3F5833E2472DC68

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event. Points are sampled from the retained history.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

05 Nov 2026 06:10 – 05 Nov 2026 11:14 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings; displayed points are a sample of the retained records.
Recorded at (UTC)RTT
6.281 ms
6.252 ms
6.315 ms
6.298 ms
6.406 ms
6.273 ms
6.259 ms
6.260 ms
6.272 ms
6.262 ms
6.242 ms
6.269 ms
6.258 ms
6.281 ms
6.289 ms
6.273 ms
6.258 ms
6.277 ms
6.245 ms
6.288 ms
6.257 ms
6.283 ms
6.285 ms
6.311 ms
6.304 ms
6.265 ms
6.307 ms
6.263 ms
6.250 ms
6.254 ms
6.279 ms
6.284 ms
6.076 ms
6.184 ms
6.273 ms
6.748 ms
6.643 ms
22.879 ms
22.826 ms
6.733 ms
6.663 ms
6.730 ms
6.657 ms
6.748 ms
6.739 ms
6.716 ms
6.718 ms
6.710 ms
6.733 ms
6.766 ms
6.733 ms
6.725 ms
6.728 ms
6.744 ms
6.722 ms
6.723 ms
6.737 ms
6.734 ms
6.787 ms
6.787 ms
6.737 ms
6.736 ms
6.709 ms
6.719 ms
6.726 ms
6.737 ms
6.703 ms
6.709 ms
6.712 ms
6.745 ms
6.751 ms
6.743 ms
6.713 ms
6.722 ms
6.714 ms
6.703 ms
6.750 ms
6.723 ms
6.736 ms
6.734 ms
6.716 ms
6.704 ms
6.629 ms
6.580 ms
6.613 ms
6.590 ms
6.609 ms
6.624 ms
6.679 ms
6.635 ms
6.678 ms
6.650 ms
6.634 ms
6.641 ms
6.666 ms
6.626 ms
6.647 ms
6.644 ms
6.639 ms
6.728 ms
6.635 ms
6.638 ms
6.700 ms
6.644 ms
6.692 ms
6.680 ms
6.654 ms
6.633 ms
6.653 ms
6.639 ms
6.642 ms
6.630 ms
6.625 ms
6.655 ms
6.683 ms
6.682 ms
6.730 ms
6.692 ms
6.657 ms
6.624 ms
6.641 ms
6.669 ms
22.845 ms
22.893 ms
22.803 ms
22.844 ms
22.905 ms
22.851 ms
22.824 ms
22.865 ms
22.817 ms
22.369 ms
22.414 ms
22.403 ms
22.391 ms
22.444 ms
22.855 ms
22.863 ms
22.967 ms
22.946 ms
22.836 ms
22.939 ms
22.822 ms
22.842 ms
22.871 ms
22.931 ms
22.887 ms
22.795 ms
21.965 ms
21.968 ms
22.851 ms
22.850 ms
22.805 ms
22.813 ms
22.818 ms
22.864 ms
22.831 ms
21.917 ms
21.949 ms
21.887 ms
22.492 ms
22.449 ms
22.384 ms
22.451 ms
22.931 ms
22.409 ms
22.360 ms
22.487 ms
22.461 ms
22.410 ms
21.948 ms
22.010 ms
21.974 ms
22.847 ms
22.843 ms
22.865 ms
22.821 ms
22.871 ms
22.821 ms
22.879 ms
22.878 ms
22.856 ms
22.933 ms
22.861 ms
22.841 ms
22.866 ms
22.869 ms
22.871 ms
22.844 ms
22.842 ms
22.860 ms
22.834 ms
22.906 ms
22.918 ms
22.901 ms
22.818 ms
22.864 ms
22.869 ms
22.867 ms
22.878 ms
22.846 ms
22.881 ms
22.829 ms
22.876 ms
22.875 ms
22.974 ms
22.795 ms
22.857 ms
21.942 ms
21.940 ms
22.883 ms
22.845 ms
22.943 ms
22.807 ms
22.868 ms
22.902 ms
22.887 ms
22.826 ms
22.816 ms
22.904 ms
22.437 ms
22.418 ms
20.680 ms
20.608 ms
20.725 ms
20.664 ms
20.633 ms
20.692 ms
22.458 ms
22.357 ms
6.855 ms
6.840 ms
6.848 ms
6.760 ms
6.729 ms
6.734 ms
6.740 ms
6.740 ms
6.854 ms
6.907 ms
6.869 ms
6.852 ms
6.714 ms
6.731 ms
6.765 ms
22.838 ms
22.808 ms
22.855 ms
22.878 ms
22.842 ms
22.836 ms
22.872 ms
22.905 ms
22.854 ms
22.841 ms
22.903 ms
22.905 ms
22.882 ms
22.904 ms
22.852 ms
22.861 ms
22.864 ms
22.811 ms
22.863 ms
22.903 ms
22.898 ms
22.913 ms
22.893 ms
22.886 ms
22.839 ms
22.843 ms
22.835 ms
22.839 ms
22.862 ms
22.876 ms
22.886 ms
22.877 ms
22.824 ms
22.871 ms
22.837 ms
22.873 ms
22.875 ms
22.891 ms
22.867 ms
22.848 ms
22.825 ms
22.907 ms
22.847 ms
22.843 ms
22.879 ms
22.862 ms
22.849 ms
22.841 ms
22.917 ms
22.860 ms
22.900 ms
22.868 ms
22.857 ms
22.874 ms
22.862 ms
22.900 ms
22.907 ms
22.846 ms
22.849 ms
22.849 ms
22.856 ms
22.926 ms
22.858 ms
22.458 ms
22.480 ms
22.394 ms
22.372 ms
22.409 ms
22.435 ms
22.425 ms
22.377 ms
22.712 ms
22.375 ms
22.394 ms
22.414 ms
22.670 ms
22.419 ms
6.384 ms
6.367 ms
6.409 ms
6.474 ms
6.385 ms
6.384 ms
6.399 ms
6.387 ms
6.425 ms
6.391 ms
6.386 ms
6.391 ms
6.421 ms
6.409 ms
6.381 ms
6.369 ms
6.402 ms
6.409 ms
6.378 ms
6.415 ms
6.380 ms
6.420 ms
6.539 ms
6.520 ms
6.540 ms
6.537 ms
6.518 ms
6.533 ms
6.502 ms
6.568 ms
6.540 ms
6.527 ms
6.520 ms
6.550 ms
6.521 ms
6.534 ms
6.522 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.131 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.699 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop16.409 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.788 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.620 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop6.042 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.296 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 5

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.158 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.792 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop0.980 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.204 msReply RTT AS8075 · Microsoft
Before

TCP traceroute / 443 · Recorded address 5

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.177 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.907 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop6.573 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.124 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop8.513 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.016 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.006 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.210 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.395 msReply RTT ASN unavailable
During

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.445 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.558 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.776 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop6.687 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination7.089 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.139 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.896 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop2.115 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.689 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop24.239 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.484 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.255 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.981 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.850 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.923 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop23.017 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.180 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop4.592 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop2.134 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop172.366 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.269 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.914 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.477 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.106 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.855 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop21.284 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop31.921 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination22.934 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.135 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.270 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.184 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.997 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.763 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.509 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop8.198 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.469 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.146 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop10.831 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.311 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop7.250 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.659 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.681 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.139 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.831 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop0.841 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.667 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.082 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.683 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.155 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.255 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop1.712 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop23.764 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.665 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop25.041 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.520 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.147 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.321 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop23.630 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop23.414 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop24.199 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop24.326 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hop24.325 msReply RTT AS8075 · Microsoft
  9. TTL 9 Probe hop23.867 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.942 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop24.111 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination23.010 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.169 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop5.408 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.144 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop5.982 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.935 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop8.713 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.328 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.655 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

No same-address, same-method pair is available among the selected replay samples. This does not mean no other matching traces were recorded.

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.734 msUsual round trip before the event
Last recorded event RTT6.907 msLast successful event recording
Event p95 RTT22.929 ms95th percentile of successful recordings
Change from baseline+0.173 msLast event RTT compared with the baseline
Successful / expected recordings370 / 370Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology