We see that there was a flap between 12/30/2014 11:27 AM GMT to 12/30/2014 11:36 AM GMT. Please can you investigate?
In addition, can you investigate the route from site towards 202.73.35.170? This is the customer's destination IP, and they experience a lot of bouncing on this link. Can you set up an IP SLA for us to investigate?