There are two taps, both between 20m and 30m long, going from the Hlog. BCat seems to be the winner.
Sorry, but unless I'm missing something, I really can't see another tap and can only see the one continuos wave. It's the regular up and down of a wave that indicates the presence of a bridge tap. I can only see one distinct regular wave.
I'm not sure what is going on at apprx tone 150 but since that narrower wave bump does not recur across the whole band-plans plus it also coincides with a load of noise in the same tones then that to me would indicate something else....
... and whilst there is something else happening at <tone 300 but its not just solely visible on the hlog. At this point we need to switch to QLN, bit load & SNR where we can see something noise related going on here. Whatever it is, it is showing in the real SNR and has caused zero bit loading up to around tone 300 which will amount to a chunk of his speed loss. It's also showing in the QLN so its a sure assumption that its not a tap but something more like a HR fault is causing an issue at those lower tones up to around 300-350ish.
The first (repeating) dip that I can make out occurs at around tone 500ish / 2.16MHz, which I think equates to a tap length of about 22m.
I don't think you can figure out how far away they are - but if someone knows I'd love to find out.
I think wwwombat worked out something. I recall him being quite accurately being able to diagnose one particular fault to within 1m of how far the fault was located from the NTE. He managed to do this on more than one occasion. He did say he was going to write more about it, but I think it was one of hose things he never got around to.
b*cat may have more recollection because they were iirc talking about the formula in PMs too. About the only other thing I can recall is that he didn't place too much importance on the number of dips, but more to do with the frequency at which the first repeating dip occured.