Ping loss alone does not prove the connection is dropping. Some routers deprioritize ICMP, and support can dismiss that result even when the timestamps look convincing. @jackthebit is right about testing multiple destinations, but include normal traffic in the test so you are measuring the same kind of failure you actually notice.
Set up a wired computer and run three checks at the same time:
- Ping your own router or modem continuously. This is the local control.
- Ping two unrelated public addresses.
- Repeatedly request a small web page or file over HTTPS and log whether it completes.
Make sure the computer’s date and time are synchronized before starting. If the local ping stays normal while both public pings and the HTTPS request fail at 8:42:17 PM, that is much harder to blame on Wi-Fi, DNS, or a slow website. If the local ping fails too, investigate the Ethernet cable, network adapter, router, modem, or power before claiming it is the ISP line.
DNS deserves its own quick check. During the next stall, try opening a site that is already loaded, making a fresh DNS lookup, and reaching a known IP address. If calls and existing downloads continue but new pages will not start, DNS may be the problem rather than the physical connection. If calls break up, downloads freeze, and several public targets fail together, the evidence points toward a broader interruption.
Keep the final evidence short. Pick three clear incidents and show about a minute before and after each one. Include the local control, public tests, HTTPS result, and the exact time. Huge log files tend to get ignored. A compact sample lets the technician compare your failures with DHCP events, modem re-registrations, signal changes, or upstream problems.
Do not connect a computer directly to a modem for hours unless its firewall is enabled and the operating system is updated. Removing the router is a useful isolation test, but it should be controlled rather than treated as the default setup. Once the same simultaneous failures appear with local connectivity remaining stable, send those timestamps with the ticket and ask for escalation based on intermittent packet transport failure, not “slow speed.”