Root cause analysis / Investigation

copilot.com

Reference RCA-E90B6E47F262EFA6

Microsoft Chat website

Measurement point: Stealth NYC, 32 Avenue of the Americas.

Published investigation. Updates run automatically.

01 / Network path

Network path.

Endpoint measurements / ICMP IPv4

Latency over time.

Successful endpoint RTT recordings from up to one hour before and after the event.

Enter time range

Times use the selected timezone; choices include recorded samples and intervals across the available chart.

Use the recordings table below to view latency values.

Successful RTT recording Event interval

04 Nov 2026 13:00 – 04 Nov 2026 15:59 UTC. Hover or tap to inspect; drag across the chart to zoom. On touchscreens, first choose Select time range. Escape or Reset zoom restores the full range. Missing recordings are gaps; this is not an application availability or packet-loss chart.

Select a recording to explore nearby path observations.

View recorded values
Successful ICMP IPv4 RTT recordings.
Recorded at (UTC)RTT
6.251 ms
6.289 ms
6.256 ms
6.275 ms
6.275 ms
6.272 ms
6.261 ms
6.299 ms
6.339 ms
6.272 ms
6.288 ms
6.300 ms
6.267 ms
6.254 ms
6.304 ms
6.266 ms
6.288 ms
6.270 ms
6.270 ms
6.278 ms
6.285 ms
6.273 ms
6.283 ms
6.266 ms
6.263 ms
6.258 ms
6.335 ms
6.262 ms
6.258 ms
6.256 ms
6.281 ms
6.252 ms
6.281 ms
6.293 ms
6.323 ms
6.249 ms
6.282 ms
6.345 ms
6.248 ms
6.290 ms
6.254 ms
6.256 ms
6.271 ms
6.287 ms
6.267 ms
6.688 ms
6.284 ms
6.357 ms
6.258 ms
6.251 ms
6.261 ms
6.276 ms
6.248 ms
6.283 ms
6.303 ms
6.275 ms
6.281 ms
6.260 ms
6.264 ms
6.271 ms
6.254 ms
6.306 ms
6.262 ms
6.288 ms
6.270 ms
6.268 ms
6.295 ms
6.266 ms
6.252 ms
6.255 ms
6.260 ms
6.285 ms
6.284 ms
6.279 ms
6.256 ms
6.262 ms
6.305 ms
6.261 ms
6.292 ms
6.309 ms
6.296 ms
6.294 ms
6.250 ms
6.289 ms
6.270 ms
6.287 ms
6.250 ms
6.267 ms
6.275 ms
6.299 ms
6.279 ms
6.261 ms
6.278 ms
6.241 ms
6.258 ms
6.319 ms
6.278 ms
6.264 ms
6.320 ms
6.257 ms
6.249 ms
6.321 ms
6.267 ms
6.377 ms
6.273 ms
6.263 ms
6.273 ms
6.269 ms
6.260 ms
6.298 ms
6.290 ms
6.255 ms
6.269 ms
6.262 ms
6.364 ms
6.299 ms
6.294 ms
6.291 ms
6.255 ms
6.313 ms
6.316 ms
6.256 ms
6.268 ms
6.268 ms
22.860 ms
22.908 ms
22.863 ms
22.851 ms
22.855 ms
22.843 ms
22.920 ms
22.909 ms
22.872 ms
22.825 ms
22.878 ms
22.899 ms
22.816 ms
22.894 ms
22.872 ms
22.860 ms
22.823 ms
22.826 ms
22.836 ms
22.814 ms
22.852 ms
22.874 ms
22.836 ms
22.812 ms
22.868 ms
22.877 ms
22.874 ms
22.869 ms
22.831 ms
23.194 ms
22.850 ms
22.836 ms
22.846 ms
22.869 ms
22.855 ms
22.858 ms
22.874 ms
22.899 ms
22.835 ms
22.863 ms
22.852 ms
22.829 ms
22.826 ms
22.892 ms
22.850 ms
22.841 ms
22.820 ms
22.848 ms
22.864 ms
22.830 ms
22.879 ms
22.916 ms
22.850 ms
22.808 ms
22.887 ms
22.997 ms
22.870 ms
22.842 ms
22.873 ms
22.844 ms
22.829 ms
22.902 ms
22.866 ms
22.815 ms
22.868 ms
22.891 ms
22.878 ms
22.828 ms
22.879 ms
22.895 ms
22.822 ms
22.849 ms
22.820 ms
22.909 ms
22.873 ms
22.858 ms
22.853 ms
22.830 ms
22.868 ms
22.853 ms
22.823 ms
22.827 ms
22.851 ms
22.884 ms
6.740 ms
6.831 ms
6.722 ms
6.737 ms
6.765 ms
6.726 ms
6.727 ms
6.718 ms
6.748 ms
6.768 ms
6.736 ms
6.753 ms
6.748 ms
6.734 ms
6.761 ms
6.739 ms
6.753 ms
6.724 ms
6.754 ms
6.772 ms
6.741 ms
6.763 ms
6.765 ms
6.855 ms
6.772 ms
6.759 ms
6.770 ms
6.735 ms
6.810 ms
6.760 ms
6.785 ms
6.737 ms
6.779 ms
6.737 ms
6.786 ms
6.771 ms
6.758 ms
6.727 ms
6.782 ms
6.742 ms
6.730 ms
6.731 ms
6.770 ms
6.738 ms
6.740 ms
6.752 ms
6.735 ms
6.775 ms
6.880 ms
6.857 ms
6.868 ms
6.884 ms
6.866 ms
6.872 ms
6.899 ms
6.934 ms
6.845 ms
6.903 ms
6.847 ms
6.857 ms
6.853 ms
6.888 ms
6.849 ms
6.858 ms
6.884 ms
6.902 ms
6.852 ms
6.909 ms
6.925 ms
6.862 ms
6.948 ms
6.889 ms
6.855 ms
6.923 ms
6.880 ms
6.841 ms
6.889 ms
6.857 ms
6.856 ms
6.834 ms
6.891 ms
6.848 ms
6.861 ms
6.850 ms
6.721 ms
6.721 ms
6.790 ms
6.822 ms
6.758 ms
6.735 ms
6.746 ms
6.735 ms
6.732 ms
6.724 ms
6.747 ms
6.741 ms
6.742 ms
6.727 ms
6.727 ms
6.739 ms
6.732 ms
6.782 ms
6.715 ms
6.755 ms
6.754 ms
6.728 ms
6.741 ms
6.765 ms
6.790 ms
6.779 ms
6.753 ms
6.759 ms
6.734 ms
6.730 ms
6.722 ms
6.755 ms
6.732 ms
6.742 ms
6.726 ms
6.736 ms
6.713 ms
6.736 ms
6.275 ms
6.266 ms
6.261 ms
6.266 ms
6.532 ms
6.278 ms
6.271 ms
6.288 ms
6.246 ms
6.277 ms
6.310 ms
6.297 ms
6.265 ms
6.264 ms
6.269 ms
6.248 ms
6.236 ms
6.265 ms
6.279 ms
6.281 ms
6.278 ms
6.331 ms
6.300 ms
6.328 ms
6.306 ms
6.276 ms
6.254 ms
6.256 ms
6.254 ms
Network path / recorded observations

Network path observations.

16 observations

Choose a measurement type to see the closest of the available sampled observations to the selected chart point. Each probe is separate and may follow a different path.

Before

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.123 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.170 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.845 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop7.163 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.046 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.389 msReply RTT AS8075 · Microsoft
Before

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.126 msReply RTT AS8002 · Stealth
Before

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.141 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop1.018 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop17.707 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.767 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hopNo replyNo comparable RTT ASN unavailable
  6. TTL 6 Probe hop7.114 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination5.955 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.123 msReply RTT AS8002 · Stealth
During

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.225 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.681 msReply RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop8.522 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.987 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop7.350 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.283 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 4

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.168 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.829 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 4

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.152 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop23.556 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop23.417 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hop23.479 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hop23.559 msReply RTT AS8075 · Microsoft
  10. TTL 10 Probe hop19.947 msReply RTT AS8075 · Microsoft
  11. TTL 11 Probe hop23.001 msReply RTT AS8075 · Microsoft
  12. TTL 12 Probe hopNo replyNo comparable RTT ASN unavailable
  13. TTL 13 Destination24.136 msReply RTT AS8075 · Microsoft
During

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.480 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.916 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hop0.853 msReply RTT AS8075 · Microsoft
  4. TTL 4 Probe hop6.817 msReply RTT AS8075 · Microsoft
During

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.154 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop7.653 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop6.939 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hop7.214 msReply RTT AS8075 · Microsoft
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Probe hopNo replyNo comparable RTT ASN unavailable
  12. TTL 12 Destination6.548 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 3

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.214 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.743 msReply RTT AS8075 · Microsoft
After

TCP traceroute / 443 · Recorded address 3

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.161 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop0.788 msReply RTT AS8075 · Microsoft
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.940 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop6.966 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.776 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.887 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 2

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.133 msReply RTT AS8002 · Stealth
After

TCP traceroute / 443 · Recorded address 2

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.137 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hopNo replyNo comparable RTT ASN unavailable
  5. TTL 5 Probe hop6.674 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hopNo replyNo comparable RTT ASN unavailable
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.493 msReply RTT AS8075 · Microsoft
After

ICMP traceroute · Recorded address 1

Recorded trace · destination not reached by this trace


to UTC

  1. TTL 1 Probe hop0.129 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hop3.734 msReply RTT ASN unavailable
After

TCP traceroute / 443 · Recorded address 1

Recorded trace · destination replied


to UTC

  1. TTL 1 Probe hop0.164 msReply RTT AS8002 · Stealth
  2. TTL 2 Probe hopNo replyNo comparable RTT ASN unavailable
  3. TTL 3 Probe hopNo replyNo comparable RTT ASN unavailable
  4. TTL 4 Probe hop6.851 msReply RTT AS8075 · Microsoft
  5. TTL 5 Probe hop7.773 msReply RTT AS8075 · Microsoft
  6. TTL 6 Probe hop7.137 msReply RTT AS8075 · Microsoft
  7. TTL 7 Probe hopNo replyNo comparable RTT ASN unavailable
  8. TTL 8 Probe hopNo replyNo comparable RTT ASN unavailable
  9. TTL 9 Probe hopNo replyNo comparable RTT ASN unavailable
  10. TTL 10 Probe hopNo replyNo comparable RTT ASN unavailable
  11. TTL 11 Destination6.116 msReply RTT AS8075 · Microsoft

RTT is the round trip to each responding hop, not the delay of the preceding link. TTL order may omit routers and does not prove direct links. A missing reply is not proof of packet loss. ASN labels are dated address associations; they do not establish the forwarding path or the operator at the event time. Up to three recorded traces per method and period are selected across the archive. Where no individual trace is available, a comparison may summarize a window; MTR observations aggregate multiple probes. Address aliases are independent across measurement types.

Same method / same recorded address

Compare the traces.

Compare one selected trace from before the event with one during it. Values are individual replies, not a statistical comparison.

ICMP traceroute · Recorded address 1

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.126 msAS8002 · Stealth0.123 msAS8002 · StealthSame responder
TCP traceroute / 443 · Recorded address 1

Before: UTC · During: UTC

Same destination address and probe method. A matching TTL does not establish the same forwarding path.
TTLBefore RTTDuring RTTResponding address
10.141 msAS8002 · Stealth0.225 msAS8002 · StealthSame responder
21.018 msAS8075 · Microsoft0.681 msSame responder
317.707 msAS8075 · MicrosoftNo replyNot established
46.767 msAS8075 · MicrosoftNo replyNot established
5No reply8.522 msAS8075 · MicrosoftNot established
67.114 msAS8075 · Microsoft7.987 msAS8075 · MicrosoftDifferent responders
7No reply7.350 msAS8075 · MicrosoftNot established
8No replyNo replyNot established
9No replyNo replyNot established
10No replyNo replyNot established
115.955 msAS8075 · MicrosoftNo replyNot established
12Not recorded6.283 msAS8075 · MicrosoftNot established

RTTs include the return path. Different responders, missing replies and independent probe flows limit what a change can localize. MTR snapshots remain separate in the replay.

Event timeline.

Possible SLA event. Times shown are UTC.

Event opened
UTC
Last event observation
UTC
Recovery observed
UTC

Recorded recovery describes this event, not current reachability.

02 / Assessment

Assessment.

Investigation stateRecovered
Path assessment

Elevated latency observed.

Endpoint round-trip time was elevated during part of the event. The available path observations do not identify where the increase occurred.

What we observed

  • A sustained increase in measured round trip time was observed.
  • The measured destination address changed across the comparison period.

Recording counts describe collected measurements, not application availability or packet loss. Exact packet paths and the return path remain unverified.

Measurements at a glance.

Baseline RTT6.691 msUsual round trip before the event
Last recorded event RTT6.737 msLast successful event recording
Event p95 RTT22.908 ms95th percentile of successful recordings
Change from baseline+0.046 msLast event RTT compared with the baseline
Successful / expected recordings120 / 120Recorded endpoint samples during the event

RTT is round trip time; p95 describes the upper range of successful recordings. Endpoint measurements differ from individual trace replies and are not an uptime percentage.

Record sources and timestamps
Analysis updated
UTC
Public snapshot published
UTC
Public observation window
– UTC

Event and source timestamps are UTC. The latency chart uses its selected timezone. Page refresh times are separate from measurement timestamps.

03 / Method and limits

Method and limits.

How to interpret the sampled path and its limits

Corroborating the path.

Comparisons use matching destinations before and during the event. ICMP traces use echo probes. TCP/443 traces send SYN probes to port 443 only; they do not complete a TCP handshake or perform a TLS or HTTP exchange.

The Stealth gNMI interface verifies the active route-table choice and maps its primary next hop to the Stealth logical interface, configured attachment and, where applicable, the known LAG member set at each snapshot. Stable Stealth replies, together with mapped interface evidence showing no corresponding errors or sustained capacity pressure, reduce the likelihood of a Stealth forwarding issue. An 80% load warning warrants investigation; it does not prove congestion. Lower interval averages can conceal bursts or queue pressure. Optical readings assess the physical link, not congestion.

What remains unseen.

Probe reply handling can differ from packet forwarding. A slow intermediate reply that disappears at later hops does not locate a forwarding problem. A destination that does not respond to a trace is not thereby shown to be unavailable.

Stealth does not use ECMP in this monitored scope. The route snapshot does not identify which physical LAG member carried a particular independent probe, attest line-card forwarding at that packet instant, prove the exact application packet flow or observe the return path. RTT includes the return path, which may differ. No remote reverse traceroute is available. Tunnels and silent routers may hide parts of the path. Address registration alone does not establish the forwarding operator or responsibility.

References: ICMP reply handling / RFC 1812 · Round trip measurements / RFC 2681 · Full methodology