Hi, Eric.
Try changing your packet size to 40 bytes and see if that changes anything.
The default 56 byte packet size in PingPlotter means we add some additional "cargo" padded on the end of a packet - and that cargo isn't really an official part of the TCP SYN packet spec.
ICMP TTL Exceeded packets are expected - that's how we know about 192.168.0.254. If things are working right, you'll see a bunch of ICMP TTL Exceeded packets - from the entire route (except for the final destination where we'll see a TCP SYN-ACK packets).
- Pete