What is the ES. SES and FEC stats average for past 7 days? Although FEC can probably be excluded as those are fixed errors which should not cause any packet loss. So just ES and SES stats.
Over the last 7 days, averages, ES(D) = 5, ES(U) = 15. (Computed from a weeks worth of dslstats errors>averages. It has to be said, now and then there can be twice as many, the upstream almost always more ES-prone.)
I have not seen ANY SES for a very long time. (Yes, I mean that. ) In the last year, I had one resync for a power brown-out, AFAICR.
Also do you have any anti ddos, or packet inspection type features enabled on your firewall which could be blocking some tbb pings. e.g. the fritzbox devices are known to do this. Asuswrt merlin has 2 firewall settings, one is the basic firewall which should be on, but there is a second option for anti ddos which when I used to use asuswrt as my router device I had that option disabled.
Basic firewall on, ddos off. I need to do some head-scratching re other kinds of packet inspection. I don't do Qos, or parental stuff, which might I suppose do that.
Also aside from the packet loss the latency variance increases at 10pm and then stays increased for the rest of the graph including overnight, I suspect there is possible malware on the network if the other stuff is ruled out, and we assume not seeding torrents or something.
Worrying. I don't do torrenting, or things like that. Some iPlayer/Netflix watching a couple of times a week.
Devices include: amazon firestick and tablet (off when not in use), 2 Raspbian pi's (always on: dslstats, and printer server), two linux systems (usually off), 2 mac systems (one always on, one hardly ever), wife's equipment eg. phone (evenings only). So, usually, on = mac, router, 2 pi's. The mac (and all other desktops, not too sure about the pi's) have basic firewalling, but no anti-virus stuff (at one time used free Sophos on the mac).
I close all unnecessary ports on anything, if I can, and am quite conscientious, I think, about good passwords and changing them.
So. I guess you'd advise (??)
1. Update router firmware.
2. Reinstall Sophos on the mac, at least to scan it.
3. Check out the firewalling on the pi's.
4. Anything else?
I appreciate your thoughts, and definitely have things to do. However, I am not entirely persuaded this is a malware problem.
I suppose I could ask a local friend to ping me at my static IP for a few days, and keep track of what packet-loss is detected from a non-TBB source.
Plusnet seem to change my gateway several times a week. I have some suspicions that their provision for customers in Scotlandshire is
not as good as AAISP's might be. I can't get a straight answer from them about they route static ips, or what disadvantages that might bring.
Many thanks.