Hey Bobby,

Thanks for writing in!

You've done some excellent detective work here! There are definitely some patterns (where the latency spikes) occurring at hop #1 that are carrying through to the final target. This would make for a strong case that the culprit in these issues could be somewhere between the user and hop #1.

What is the device that's at hop #1 - and how is this machine connecting to the network (wired or wireless)? Usually anything inside of a user's network is going to return a response of 1ms or less, but it looks like the average here (per the .pp2 files you emailed over to us) is closer to 6ms (which *may* be a bit of a red flag, depending on their setup...).

The goal at this point should be to isolate and eliminate any variables (that you/your client have control over) to see if you can definitively narrow down what the source of the problem is here here. If you (or your client) are interested, we've got a guide that goes over a few different strategies on this front, which you can find here:

http://www.pingplotter.com/netnirvana/

If your client is claiming that they're giving low priority to ICMP traffic, you could always switch over to a different packet type (TCP) to see if that has any impact on the results as well.

Hopefully this helps out! If you should find yourself with any questions, or needing ay further guidance - don't hesitate to let us know.

Best wishes,

-Gary