Broadband crawling - 1-3mb for a 50mb line (logs included)

[pierrejo]

Hi,
I am sharing a 50 mb/s TWC line and can't seem to get anywhere: I'm getting significant packet losses in games (freezes / disconects)
I'm trying to figure out where it might be coming from, if it is either from one of the 5-7 computers we have (a couple of those are heavy on streaming) or if it might be the ISP...

I've ran a few tests: M Lab - Traceroute & Router Pings (all results posted). I've disabled Nable optimization on router. It seem the router might be the issue judging by the pings? What do you think?

NB: If I reset the router I can get to 40mb/s. That sounds like it might be a computer on the network... likely loaded with botnet or other malware. I've looked into wireshark to track things down but all I managed to figure out was some broadcasts to a non-existent wireless printer from my own laptop (Hah!~)

Client System Details
OS data:: Mac OS 10.10.0, Architecture: x86
Flash Info: Version = MAC 16,0,0,305
The slowest link in the end-to-end path is a
a 622 Mbps OC-12 subnet
Information: Other network traffic is congesting the link
This connection is network limited 92.10% of the time
622 Mbps OC-12 link found.
Link set to Full Duplex mode
Information: throughput is limited by other network traffic.
Good network cable(s) found
Normal duplex operation found.
Web100 reports the Round trip time = 368.1ms
the Packet size = 1340bytes
101 packets retransmitted
426 duplicate acks received
447 SACK blocks received
The connection was idle 0.00 seconds (0.00% of the time)
C2S throughput test: Packet queuing detected: 3.78%
S2C throughput test: Packet queuing detected: 3.78%
Web100 reports TCP negotiated the optional Performance Settings to:
RFC 2018 Selective Acknowledgement:
ON
RFC 896 Nagle Algorithm:
ON
RFC 3168 Explicit Congestion Notification:
OFF
RFC 1323 Time Stamping:
ON
RFC 1323 Window Scaling:
ON; Scaling Factors - Server=5, Client=7
The theoretical network limit is 1.72 Mbps
The NDT server has a 466.69 KByte buffer which limits the throughput to 19.81 Mbps
Your PC/Workstation has a 486.53 KByte buffer which limits the throughput to 10.33 Mbps
The network based flow control limits the throughput to 9.58 Mbps
Client Data reports link is OC-12
Client Acks report link is T3;
Server Data reports link is OC-48
=== Results sent by the server ===
CurMSS: 1340
X_Rcvbuf: 87380
X_Sndbuf: 955776
AckPktsOut: 0
BytesRetrans: 135340
CongAvoid: 511
CongestionOverCount: 0
CongestionSignals: 1
CountRTT: 1147
CurCwnd: 234500
CurRTO: 877
CurRwinRcvd: 496864
CurRwinSent: 5888
CurSsthresh: 230480
DSACKDups: 0
DataBytesIn: 0
DataBytesOut: 5242040
DataPktsIn: 0
DataPktsOut: 3823
DupAcksIn: 426
ECNEnabled: 0
FastRetran: 1
MaxCwnd: 462300
MaxMSS: 1340
MaxRTO: 1214
MaxRTT: 893
MaxRwinRcvd: 498208
MaxRwinSent: 5888
MaxSsthresh: 230480
MinMSS: 1340
MinRTO: 290
MinRTT: 89
MinRwinRcvd: 121664
MinRwinSent: 5792
NagleEnabled: 1
OtherReductions: 0
PktsIn: 1573
PktsOut: 3823
PktsRetrans: 101
RcvWinScale: 7
SACKEnabled: 3
SACKsRcvd: 447
SendStall: 0
SlowStart: 488
SampleRTT: 390
SmoothedRTT: 445
SndWinScale: 5
SndLimTimeRwin: 639969
SndLimTimeCwnd: 9622903
SndLimTimeSender: 185136
SndLimTransRwin: 10
SndLimTransCwnd: 20
SndLimTransSender: 10
SndLimBytesRwin: 170128
SndLimBytesCwnd: 4904900
SndLimBytesSender: 167012
SubsequentTimeouts: 0
SumRTT: 422205
Timeouts: 0
TimestampsEnabled: 1
WinScaleRcvd: 5
WinScaleSent: 7
DupAcksOut: 0
StartTimeUsec: 285315
Duration: 10448379
c2sData: 6
c2sAck: 4
s2cData: 8
s2cAck: 10
half_duplex: 0
link: 0
congestion: 1
bad_cable: 0
mismatch: 0
spd: 4.01
bw: 1.72
loss: 0.000261575
avgrtt: 368.10
waitsec: 0.00
timesec: 10.00
order: 0.2708
rwintime: 0.0613
sendtime: 0.0177
cwndtime: 0.9210
rwin: 3.8010
swin: 7.2920
cwin: 3.5271
rttsec: 0.368095
Sndbuf: 955776
aspd: 0.00000
CWND-Limited: -0.24
minCWNDpeak: 36180
maxCWNDpeak: 462300
CWNDpeaks: 1



And here's a Traceroute - not sure what goes on with hop 6.

traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 72 byte packets
1 10.114.0.1 (10.114.0.1) 117.346 ms 84.474 ms 84.568 ms edit - first hop is behind a vpn
2 hosted.by.leaseweb.com (162.210.197.252) 87.312 ms 87.295 ms 86.869 ms
3 bundle-ether8.cr2-wdc1.leaseweb.net (108.59.15.110) 85.941 ms 86.980 ms 83.740 ms
4 tengigabitethernet2-2.wdc-msc2.leaseweb.net (217.20.125.10) 92.601 ms 110.726 ms 83.717 ms
5 xe-0-2-2.sv1-ms1.leaseweb.net (217.20.125.57) 168.406 ms 160.399 ms 159.476 ms
6 * * *
7 72.14.239.95 (72.14.239.95) 162.724 ms 159.031 ms 159.496 ms
8 google-public-dns-a.google.com (8.8.8.8) 163.791 ms 161.452 ms 167.394 ms

[pierrejo]

This morning, while downloading a video lecture...

Client System Details
OS data:: Mac OS 10.10.0, Architecture: x86
Flash Info: Version = MAC 17,0,0,134
The slowest link in the end-to-end path is a
10 Mbps Ethernet subnet
Information: Other network traffic is congesting the link
This connection is network limited 90.75% of the time
10 Mbps Ethernet link found.
Link set to Full Duplex mode
Information: throughput is limited by other network traffic.
Good network cable(s) found
Normal duplex operation found.
Web100 reports the Round trip time = 208.11ms
the Packet size = 1340bytes
53 packets retransmitted
648 duplicate acks received
675 SACK blocks received
The connection was idle 0.00 seconds (0.00% of the time)
C2S throughput test: Packet queuing detected: 6.70%
S2C throughput test: Packet queuing detected: 6.70%
Web100 reports TCP negotiated the optional Performance Settings to:
RFC 2018 Selective Acknowledgement:
ON
RFC 896 Nagle Algorithm:
ON
RFC 3168 Explicit Congestion Notification:
OFF
RFC 1323 Time Stamping:
ON
RFC 1323 Window Scaling:
ON; Scaling Factors - Server=5, Client=7
The theoretical network limit is 1.11 Mbps
The NDT server has a 660.84 KByte buffer which limits the throughput to 49.62 Mbps
Your PC/Workstation has a 667.13 KByte buffer which limits the throughput to 25.04 Mbps
The network based flow control limits the throughput to 19.75 Mbps
Client Data reports link is Ethernet
Client Acks report link is Ethernet
Server Data reports link is OC-12
=== Results sent by the server ===
CurMSS: 1340
X_Rcvbuf: 87380
X_Sndbuf: 1353408
AckPktsOut: 0
BytesRetrans: 71020
CongAvoid: 456
CongestionOverCount: 0
CongestionSignals: 5
CountRTT: 1115
CurCwnd: 33500
CurRTO: 374
CurRwinRcvd: 683136
CurRwinSent: 5888
CurSsthresh: 14740
DSACKDups: 0
DataBytesIn: 0
DataBytesOut: 3513992
DataPktsIn: 0
DataPktsOut: 2563
DupAcksIn: 648
ECNEnabled: 0
FastRetran: 5
MaxCwnd: 538680
MaxMSS: 1340
MaxRTO: 998
MaxRTT: 391
MaxRwinRcvd: 683136
MaxRwinSent: 5888
MaxSsthresh: 268000
MinMSS: 1340
MinRTO: 367
MinRTT: 159
MinRwinRcvd: 129728
MinRwinSent: 5792
NagleEnabled: 1
OtherReductions: 3
PktsIn: 1763
PktsOut: 2563
PktsRetrans: 53
RcvWinScale: 7
SACKEnabled: 3
SACKsRcvd: 675
SendStall: 0
SlowStart: 457
SampleRTT: 172
SmoothedRTT: 171
SndWinScale: 5
SndLimTimeRwin: 661337
SndLimTimeCwnd: 9894753
SndLimTimeSender: 347232
SndLimTransRwin: 6
SndLimTransCwnd: 16
SndLimTransSender: 10
SndLimBytesRwin: 425320
SndLimBytesCwnd: 3038980
SndLimBytesSender: 49692
SubsequentTimeouts: 0
SumRTT: 232048
Timeouts: 0
TimestampsEnabled: 1
WinScaleRcvd: 5
WinScaleSent: 7
DupAcksOut: 0
StartTimeUsec: 181696
Duration: 10904261
c2sData: 3
c2sAck: 3
s2cData: 6
s2cAck: 10
half_duplex: 0
link: 0
congestion: 1
bad_cable: 0
mismatch: 0
spd: 2.58
bw: 1.11
loss: 0.001950839
avgrtt: 208.11
waitsec: 0.00
timesec: 10.00
order: 0.3676
rwintime: 0.0607
sendtime: 0.0318
cwndtime: 0.9075
rwin: 5.2119
swin: 10.3257
cwin: 4.1098
rttsec: 0.208115
Sndbuf: 1353408
aspd: 0.00000
CWND-Limited: -0.37
minCWNDpeak: 8040
maxCWNDpeak: 538680
CWNDpeaks: 6



Traceroute has started…

traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 72 byte packets
1 10.114.0.1 (10.114.0.1) 98.592 ms 385.280 ms 86.663 ms edit - first hop is behind a vpn
2 hosted.by.leaseweb.com (162.210.197.252) 83.112 ms 85.183 ms 82.990 ms
3 bundle-ether8.cr2-wdc1.leaseweb.net (108.59.15.110) 86.308 ms 83.555 ms 83.234 ms
4 tengigabitethernet2-2.wdc-msc2.leaseweb.net (217.20.125.10) 84.709 ms 138.507 ms 84.290 ms
5 xe-0-2-2.sv1-ms1.leaseweb.net (217.20.125.57) 164.628 ms 160.399 ms 165.126 ms
6 * * *
7 72.14.239.95 (72.14.239.95) 159.817 ms 219.392 ms 165.305 ms
8 google-public-dns-a.google.com (8.8.8.8) 161.264 ms 158.320 ms 168.199 ms

[pierrejo]

adding a router ping -
PING 192.168.0.1 (192.168.0.1): 56 data bytes
64 bytes from 192.168.0.1: icmp_seq=0 ttl=64 time=16.205 ms
64 bytes from 192.168.0.1: icmp_seq=1 ttl=64 time=4.028 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=64 time=7.352 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=64 time=13.774 ms
64 bytes from 192.168.0.1: icmp_seq=4 ttl=64 time=73.363 ms
64 bytes from 192.168.0.1: icmp_seq=5 ttl=64 time=12.624 ms
64 bytes from 192.168.0.1: icmp_seq=6 ttl=64 time=45.868 ms
64 bytes from 192.168.0.1: icmp_seq=7 ttl=64 time=10.726 ms
64 bytes from 192.168.0.1: icmp_seq=8 ttl=64 time=23.051 ms
64 bytes from 192.168.0.1: icmp_seq=9 ttl=64 time=4.178 ms
64 bytes from 192.168.0.1: icmp_seq=10 ttl=64 time=11.978 ms
64 bytes from 192.168.0.1: icmp_seq=11 ttl=64 time=10.934 ms
64 bytes from 192.168.0.1: icmp_seq=12 ttl=64 time=8.760 ms
64 bytes from 192.168.0.1: icmp_seq=13 ttl=64 time=12.221 ms
64 bytes from 192.168.0.1: icmp_seq=14 ttl=64 time=8.123 ms
64 bytes from 192.168.0.1: icmp_seq=15 ttl=64 time=7.591 ms
64 bytes from 192.168.0.1: icmp_seq=16 ttl=64 time=6.299 ms
64 bytes from 192.168.0.1: icmp_seq=17 ttl=64 time=5.253 ms
64 bytes from 192.168.0.1: icmp_seq=18 ttl=64 time=205.735 ms
64 bytes from 192.168.0.1: icmp_seq=19 ttl=64 time=205.522 ms
Request timeout for icmp_seq 20
64 bytes from 192.168.0.1: icmp_seq=21 ttl=64 time=321.677 ms
64 bytes from 192.168.0.1: icmp_seq=22 ttl=64 time=6.677 ms
64 bytes from 192.168.0.1: icmp_seq=23 ttl=64 time=7.976 ms
64 bytes from 192.168.0.1: icmp_seq=24 ttl=64 time=7.658 ms
64 bytes from 192.168.0.1: icmp_seq=25 ttl=64 time=16.684 ms
64 bytes from 192.168.0.1: icmp_seq=26 ttl=64 time=6.995 ms
64 bytes from 192.168.0.1: icmp_seq=27 ttl=64 time=8.265 ms
64 bytes from 192.168.0.1: icmp_seq=28 ttl=64 time=4.926 ms
64 bytes from 192.168.0.1: icmp_seq=29 ttl=64 time=23.785 ms
64 bytes from 192.168.0.1: icmp_seq=30 ttl=64 time=6.683 ms
64 bytes from 192.168.0.1: icmp_seq=31 ttl=64 time=5.923 ms
64 bytes from 192.168.0.1: icmp_seq=32 ttl=64 time=10.330 ms
64 bytes from 192.168.0.1: icmp_seq=33 ttl=64 time=9.954 ms
64 bytes from 192.168.0.1: icmp_seq=34 ttl=64 time=4.469 ms
64 bytes from 192.168.0.1: icmp_seq=35 ttl=64 time=9.508 ms
64 bytes from 192.168.0.1: icmp_seq=36 ttl=64 time=4.567 ms
64 bytes from 192.168.0.1: icmp_seq=37 ttl=64 time=11.037 ms
64 bytes from 192.168.0.1: icmp_seq=38 ttl=64 time=8.373 ms
64 bytes from 192.168.0.1: icmp_seq=39 ttl=64 time=13.533 ms
64 bytes from 192.168.0.1: icmp_seq=40 ttl=64 time=32.666 ms
64 bytes from 192.168.0.1: icmp_seq=41 ttl=64 time=8.630 ms
64 bytes from 192.168.0.1: icmp_seq=42 ttl=64 time=13.122 ms
64 bytes from 192.168.0.1: icmp_seq=43 ttl=64 time=13.857 ms
64 bytes from 192.168.0.1: icmp_seq=44 ttl=64 time=4.662 ms
64 bytes from 192.168.0.1: icmp_seq=45 ttl=64 time=13.937 ms
Request timeout for icmp_seq 46
Request timeout for icmp_seq 47
64 bytes from 192.168.0.1: icmp_seq=48 ttl=64 time=4.554 ms
64 bytes from 192.168.0.1: icmp_seq=49 ttl=64 time=31.948 ms
64 bytes from 192.168.0.1: icmp_seq=50 ttl=64 time=59.310 ms
64 bytes from 192.168.0.1: icmp_seq=51 ttl=64 time=9.614 ms
64 bytes from 192.168.0.1: icmp_seq=52 ttl=64 time=94.910 ms
Request timeout for icmp_seq 53
Request timeout for icmp_seq 54
64 bytes from 192.168.0.1: icmp_seq=55 ttl=64 time=157.639 ms
Request timeout for icmp_seq 56
Request timeout for icmp_seq 57
Request timeout for icmp_seq 58
64 bytes from 192.168.0.1: icmp_seq=59 ttl=64 time=16.285 ms
64 bytes from 192.168.0.1: icmp_seq=60 ttl=64 time=4.096 ms
64 bytes from 192.168.0.1: icmp_seq=61 ttl=64 time=6.559 ms
64 bytes from 192.168.0.1: icmp_seq=62 ttl=64 time=2.553 ms
64 bytes from 192.168.0.1: icmp_seq=63 ttl=64 time=4.412 ms
64 bytes from 192.168.0.1: icmp_seq=64 ttl=64 time=6.736 ms
64 bytes from 192.168.0.1: icmp_seq=65 ttl=64 time=6.924 ms
64 bytes from 192.168.0.1: icmp_seq=66 ttl=64 time=4.888 ms
64 bytes from 192.168.0.1: icmp_seq=67 ttl=64 time=7.950 ms
64 bytes from 192.168.0.1: icmp_seq=68 ttl=64 time=11.854 ms
64 bytes from 192.168.0.1: icmp_seq=69 ttl=64 time=9.693 ms
64 bytes from 192.168.0.1: icmp_seq=70 ttl=64 time=9.885 ms
64 bytes from 192.168.0.1: icmp_seq=71 ttl=64 time=16.587 ms
64 bytes from 192.168.0.1: icmp_seq=72 ttl=64 time=5.554 ms
64 bytes from 192.168.0.1: icmp_seq=73 ttl=64 time=15.439 ms
64 bytes from 192.168.0.1: icmp_seq=74 ttl=64 time=8.204 ms
64 bytes from 192.168.0.1: icmp_seq=75 ttl=64 time=8.333 ms
64 bytes from 192.168.0.1: icmp_seq=76 ttl=64 time=12.036 ms
64 bytes from 192.168.0.1: icmp_seq=77 ttl=64 time=11.113 ms
64 bytes from 192.168.0.1: icmp_seq=78 ttl=64 time=6.119 ms
64 bytes from 192.168.0.1: icmp_seq=79 ttl=64 time=10.425 ms
64 bytes from 192.168.0.1: icmp_seq=80 ttl=64 time=4.284 ms
64 bytes from 192.168.0.1: icmp_seq=81 ttl=64 time=13.931 ms
64 bytes from 192.168.0.1: icmp_seq=82 ttl=64 time=4.269 ms
64 bytes from 192.168.0.1: icmp_seq=83 ttl=64 time=14.757 ms
64 bytes from 192.168.0.1: icmp_seq=84 ttl=64 time=11.186 ms
64 bytes from 192.168.0.1: icmp_seq=85 ttl=64 time=21.866 ms
64 bytes from 192.168.0.1: icmp_seq=86 ttl=64 time=4.530 ms
64 bytes from 192.168.0.1: icmp_seq=87 ttl=64 time=14.234 ms
64 bytes from 192.168.0.1: icmp_seq=88 ttl=64 time=10.551 ms
64 bytes from 192.168.0.1: icmp_seq=89 ttl=64 time=351.376 ms
64 bytes from 192.168.0.1: icmp_seq=90 ttl=64 time=29.982 ms
64 bytes from 192.168.0.1: icmp_seq=91 ttl=64 time=13.218 ms
64 bytes from 192.168.0.1: icmp_seq=92 ttl=64 time=10.200 ms
64 bytes from 192.168.0.1: icmp_seq=93 ttl=64 time=7.944 ms
64 bytes from 192.168.0.1: icmp_seq=94 ttl=64 time=5.739 ms
64 bytes from 192.168.0.1: icmp_seq=95 ttl=64 time=15.031 ms
64 bytes from 192.168.0.1: icmp_seq=96 ttl=64 time=4.046 ms
64 bytes from 192.168.0.1: icmp_seq=97 ttl=64 time=52.862 ms
64 bytes from 192.168.0.1: icmp_seq=98 ttl=64 time=5.736 ms
64 bytes from 192.168.0.1: icmp_seq=99 ttl=64 time=18.924 ms
64 bytes from 192.168.0.1: icmp_seq=100 ttl=64 time=7.353 ms
64 bytes from 192.168.0.1: icmp_seq=101 ttl=64 time=4.833 ms
64 bytes from 192.168.0.1: icmp_seq=102 ttl=64 time=4.442 ms
64 bytes from 192.168.0.1: icmp_seq=103 ttl=64 time=19.606 ms
64 bytes from 192.168.0.1: icmp_seq=104 ttl=64 time=7.405 ms
64 bytes from 192.168.0.1: icmp_seq=105 ttl=64 time=6.122 ms
64 bytes from 192.168.0.1: icmp_seq=106 ttl=64 time=12.343 ms
64 bytes from 192.168.0.1: icmp_seq=107 ttl=64 time=10.965 ms
64 bytes from 192.168.0.1: icmp_seq=108 ttl=64 time=27.101 ms
64 bytes from 192.168.0.1: icmp_seq=109 ttl=64 time=13.883 ms
64 bytes from 192.168.0.1: icmp_seq=110 ttl=64 time=11.118 ms
64 bytes from 192.168.0.1: icmp_seq=111 ttl=64 time=9.102 ms
64 bytes from 192.168.0.1: icmp_seq=112 ttl=64 time=12.118 ms
64 bytes from 192.168.0.1: icmp_seq=113 ttl=64 time=14.252 ms
64 bytes from 192.168.0.1: icmp_seq=114 ttl=64 time=79.061 ms
64 bytes from 192.168.0.1: icmp_seq=115 ttl=64 time=50.097 ms
64 bytes from 192.168.0.1: icmp_seq=116 ttl=64 time=11.195 ms
64 bytes from 192.168.0.1: icmp_seq=117 ttl=64 time=8.161 ms
Request timeout for icmp_seq 118
64 bytes from 192.168.0.1: icmp_seq=119 ttl=64 time=6.015 ms
64 bytes from 192.168.0.1: icmp_seq=120 ttl=64 time=10.311 ms
64 bytes from 192.168.0.1: icmp_seq=121 ttl=64 time=6.937 ms
64 bytes from 192.168.0.1: icmp_seq=122 ttl=64 time=5.969 ms
64 bytes from 192.168.0.1: icmp_seq=123 ttl=64 time=11.614 ms
64 bytes from 192.168.0.1: icmp_seq=124 ttl=64 time=9.982 ms
64 bytes from 192.168.0.1: icmp_seq=125 ttl=64 time=308.250 ms
64 bytes from 192.168.0.1: icmp_seq=126 ttl=64 time=7.838 ms
64 bytes from 192.168.0.1: icmp_seq=127 ttl=64 time=26.055 ms
64 bytes from 192.168.0.1: icmp_seq=128 ttl=64 time=68.666 ms
Request timeout for icmp_seq 129
64 bytes from 192.168.0.1: icmp_seq=130 ttl=64 time=5.129 ms
64 bytes from 192.168.0.1: icmp_seq=131 ttl=64 time=19.184 ms
Request timeout for icmp_seq 132
Request timeout for icmp_seq 133
64 bytes from 192.168.0.1: icmp_seq=134 ttl=64 time=304.908 ms
64 bytes from 192.168.0.1: icmp_seq=135 ttl=64 time=102.639 ms
64 bytes from 192.168.0.1: icmp_seq=136 ttl=64 time=156.557 ms
Request timeout for icmp_seq 137
64 bytes from 192.168.0.1: icmp_seq=138 ttl=64 time=536.273 ms
64 bytes from 192.168.0.1: icmp_seq=139 ttl=64 time=416.336 ms
64 bytes from 192.168.0.1: icmp_seq=140 ttl=64 time=433.273 ms
64 bytes from 192.168.0.1: icmp_seq=141 ttl=64 time=10.219 ms
64 bytes from 192.168.0.1: icmp_seq=142 ttl=64 time=14.740 ms
64 bytes from 192.168.0.1: icmp_seq=143 ttl=64 time=5.588 ms
64 bytes from 192.168.0.1: icmp_seq=144 ttl=64 time=7.150 ms
64 bytes from 192.168.0.1: icmp_seq=145 ttl=64 time=4.533 ms
64 bytes from 192.168.0.1: icmp_seq=146 ttl=64 time=6.926 ms
64 bytes from 192.168.0.1: icmp_seq=147 ttl=64 time=56.526 ms
64 bytes from 192.168.0.1: icmp_seq=148 ttl=64 time=10.091 ms
64 bytes from 192.168.0.1: icmp_seq=149 ttl=64 time=6.852 ms
64 bytes from 192.168.0.1: icmp_seq=150 ttl=64 time=11.416 ms
64 bytes from 192.168.0.1: icmp_seq=151 ttl=64 time=8.421 ms
64 bytes from 192.168.0.1: icmp_seq=152 ttl=64 time=4.784 ms
64 bytes from 192.168.0.1: icmp_seq=153 ttl=64 time=9.653 ms
64 bytes from 192.168.0.1: icmp_seq=154 ttl=64 time=7.426 ms
64 bytes from 192.168.0.1: icmp_seq=155 ttl=64 time=13.783 ms
64 bytes from 192.168.0.1: icmp_seq=156 ttl=64 time=74.470 ms
64 bytes from 192.168.0.1: icmp_seq=157 ttl=64 time=14.431 ms
64 bytes from 192.168.0.1: icmp_seq=158 ttl=64 time=9.892 ms
64 bytes from 192.168.0.1: icmp_seq=159 ttl=64 time=16.544 ms
64 bytes from 192.168.0.1: icmp_seq=160 ttl=64 time=10.048 ms
64 bytes from 192.168.0.1: icmp_seq=161 ttl=64 time=10.150 ms
Request timeout for icmp_seq 162
64 bytes from 192.168.0.1: icmp_seq=163 ttl=64 time=306.282 ms
64 bytes from 192.168.0.1: icmp_seq=164 ttl=64 time=10.542 ms
64 bytes from 192.168.0.1: icmp_seq=165 ttl=64 time=18.224 ms
64 bytes from 192.168.0.1: icmp_seq=166 ttl=64 time=12.197 ms
64 bytes from 192.168.0.1: icmp_seq=167 ttl=64 time=6.216 ms
64 bytes from 192.168.0.1: icmp_seq=168 ttl=64 time=14.164 ms
64 bytes from 192.168.0.1: icmp_seq=169 ttl=64 time=17.063 ms
64 bytes from 192.168.0.1: icmp_seq=170 ttl=64 time=3.499 ms
64 bytes from 192.168.0.1: icmp_seq=171 ttl=64 time=36.344 ms
64 bytes from 192.168.0.1: icmp_seq=172 ttl=64 time=21.277 ms
64 bytes from 192.168.0.1: icmp_seq=173 ttl=64 time=10.092 ms
64 bytes from 192.168.0.1: icmp_seq=174 ttl=64 time=16.182 ms
64 bytes from 192.168.0.1: icmp_seq=175 ttl=64 time=4.614 ms
64 bytes from 192.168.0.1: icmp_seq=176 ttl=64 time=13.605 ms
64 bytes from 192.168.0.1: icmp_seq=177 ttl=64 time=12.382 ms
64 bytes from 192.168.0.1: icmp_seq=178 ttl=64 time=7.325 ms
64 bytes from 192.168.0.1: icmp_seq=179 ttl=64 time=5.410 ms
64 bytes from 192.168.0.1: icmp_seq=180 ttl=64 time=30.442 ms
64 bytes from 192.168.0.1: icmp_seq=181 ttl=64 time=186.350 ms
64 bytes from 192.168.0.1: icmp_seq=182 ttl=64 time=7.712 ms
64 bytes from 192.168.0.1: icmp_seq=183 ttl=64 time=15.715 ms
64 bytes from 192.168.0.1: icmp_seq=184 ttl=64 time=12.275 ms
64 bytes from 192.168.0.1: icmp_seq=185 ttl=64 time=31.191 ms
64 bytes from 192.168.0.1: icmp_seq=186 ttl=64 time=16.030 ms
64 bytes from 192.168.0.1: icmp_seq=187 ttl=64 time=7.089 ms
64 bytes from 192.168.0.1: icmp_seq=188 ttl=64 time=8.857 ms
64 bytes from 192.168.0.1: icmp_seq=189 ttl=64 time=8.364 ms
64 bytes from 192.168.0.1: icmp_seq=190 ttl=64 time=5.336 ms
64 bytes from 192.168.0.1: icmp_seq=191 ttl=64 time=12.303 ms
64 bytes from 192.168.0.1: icmp_seq=192 ttl=64 time=7.397 ms
64 bytes from 192.168.0.1: icmp_seq=193 ttl=64 time=2.563 ms
64 bytes from 192.168.0.1: icmp_seq=194 ttl=64 time=2.343 ms
64 bytes from 192.168.0.1: icmp_seq=195 ttl=64 time=6.869 ms
64 bytes from 192.168.0.1: icmp_seq=196 ttl=64 time=9.320 ms
64 bytes from 192.168.0.1: icmp_seq=197 ttl=64 time=8.241 ms
64 bytes from 192.168.0.1: icmp_seq=198 ttl=64 time=11.586 ms
64 bytes from 192.168.0.1: icmp_seq=199 ttl=64 time=4.317 ms
64 bytes from 192.168.0.1: icmp_seq=200 ttl=64 time=6.282 ms
64 bytes from 192.168.0.1: icmp_seq=201 ttl=64 time=7.863 ms
64 bytes from 192.168.0.1: icmp_seq=202 ttl=64 time=18.793 ms
64 bytes from 192.168.0.1: icmp_seq=203 ttl=64 time=26.684 ms

[Philip]

You can try using netstat to find active connections from your MAC
Your traces seem to indicate very high latency to the first hop, which is an internal IP, I'm guessing your router ? --> 10.114.0.1
This should be 10 times lower, as in ~10ms. If it is wireless/congested it may spike higher. Are other clients experiencing the same latency to the first hop ? How about wired clients ?

If your router does not provide traffic information, you can try disconnecting clients one by one and see if the latency to the first hop drops. You may want to update the firmware of the router, some of the older residential units can get bogged down with several clients, especially if establishing many connections.

[pierrejo]

Hi Philip - netstat seems to show a LOT of active connections, I'm not sure how to clean this up - I do use Mulvad (VPN) but effects on network with it on or off have not been significant enough in speed tests. It seems if I try to post it here the spacing gets messed up (ex: ' ' shows up as 1 space but there are actually 4... how can I go about fixing that formatting?) Should I post it here?
I have not tried to check the latency from other clients yet as this is the router that 6 units use (we share internet...) and messing with the internet is a surefire way to get ppl pissed at you these days, no matter how slow it goes!

[Philip]

See the ESTABLISHED connections... Not sure about any Mac syntax differences, in Linux it would be:
netstat -anp | grep ESTABLISHED

Look at the port they're using, and the process/PID that the connections are using, that will give you some pointers as to what program is using up all the connections.

[pierrejo]

(progress update)
netstat will not give pids on osx.
I used "sudo lsof -i -P"
I found out a weird connection from Adobe / Maya which was running in background (smoke) and I had to work to get rid of it / uninstall it.
Google establishes 26 different sockets (same PID) .... I have a few browser extensions but am not sure if I should get more than that. Will check later.
One for Mullvad and one for openVPN (I assumed I'd see only one of those not both, contacting Mullvad).
The next two programs, have no clue. I'm digging a bit to find out what they are...
ocspd 148 root 6u IPv6 0xxxxxxxxxxxxx 0t0 TCP [xxxxxxxxxxxx]:50532->[2a00400c:c07::71]:http (ESTABLISHED)
and
apsd 53 root 6u IPv4 0xxxxxxxxxxxxx 0t0 TCP xxxxxxxxxxxx->17.143.160.214:5223 (ESTABLISHED)

Some digging lists apsd as Apple’s FaceTime push - sending encrypted traffic out. Blocking it.
ocspd is for certificates, after 10 pages of thread about this eating bandwith (in 2013) I just turned CRL off in keychain access.

gotta admit it feels good to do some spring cleaning!

[pierrejo]

I realized the first hop took extra time because it was through the VPN.

Here's a traceroute out without VPN:

traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 72 byte packets
1 192.168.0.1 (192.168.0.1) 5.930 ms 3.682 ms *
2 cpe-23-241-52-1.socal.res.rr.com (23.241.52.1) 29.478 ms 31.691 ms 17.854 ms
3 tge0-9-0-16.lsayca3301h.socal.rr.com (24.30.173.33) 49.662 ms 36.194 ms 39.136 ms
4 agg26.lamrcadq01r.socal.rr.com (72.129.10.22) 29.456 ms 27.906 ms 30.423 ms
5 agg28.lsancarc01r.socal.rr.com (72.129.9.0) 29.569 ms 29.248 ms 29.803 ms
6 bu-ether36.lsancarc0yw-bcr00.tbone.rr.com (107.14.19.32) 28.563 ms 29.187 ms 30.091 ms
7 0.ae1.pr1.lax00.tbone.rr.com (107.14.17.250) 30.110 ms 38.574 ms 29.871 ms
8 ix-24-0.tcore1.lvw-los-angeles.as6453.net (66.110.59.81) 31.102 ms 43.167 ms 23.980 ms
9 72.14.219.150 (72.14.219.150) 58.067 ms 66.998 ms 63.002 ms
10 209.85.250.99 (209.85.250.99) 27.403 ms 31.489 ms 36.086 ms
11 google-public-dns-a.google.com (8.8.8.8) 24.811 ms 25.101 ms 18.163 ms