https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36314#M4193 I would take a trace of the trap/inform/syslog that is coming from the switch. A tcpdump from the Netsight server would suffice.<BR /> <BR /> Use this article for guidance, but change the ports according to what is coming across the wire. typically it's port 162 for traps/alarms.<BR /> <BR /> <A href="https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Troubleshooting-Tips-common-tcpdump-commands-used-for-isolating-issue" target="_blank" rel="nofollow noreferrer noopener">https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Troubleshooting-Tips-common-tcpdump-co...</A><BR /> <BR /> Note to decode with Wireshark, you will need to add in the SNMP credentials manually. Fri, 10 Jun 2016 19:23:00 GMT Mike_Thomas 2016-06-10T19:23:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36311#M4190 Hey everyone! It's my turn for a question. I am monitoring Cisco switches via SNMPv3 and have all the alerting setup. Now the alerting is working perfectly and happens with issue. The problem I am having is that it does not tell me which interface is being sturated. Just that the ":ifUtilization, value: 84.235083, compared to: 80.0"<BR /> <BR /> Is there a way for Netsight or the Cisco gear to report what interface this is happening to?<BR /> <BR /> Thanks in advance!!!<BR /> <BR /> Fri, 10 Jun 2016 18:26:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36311#M4190 Joseph_Burnswor 2016-06-10T18:26:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36312#M4191 This would depend on the raw data coming from the Cisco switch, be it via SNMP or syslog, if it includes that information or not. Fri, 10 Jun 2016 19:01:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36312#M4191 Mike_Thomas 2016-06-10T19:01:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36313#M4192 Thank you for the feed back. Do we know how to make it so? <BR /> Fri, 10 Jun 2016 19:23:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36313#M4192 Joseph_Burnswor 2016-06-10T19:23:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36314#M4193 I would take a trace of the trap/inform/syslog that is coming from the switch. A tcpdump from the Netsight server would suffice.<BR /> <BR /> Use this article for guidance, but change the ports according to what is coming across the wire. typically it's port 162 for traps/alarms.<BR /> <BR /> <A href="https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Troubleshooting-Tips-common-tcpdump-commands-used-for-isolating-issue" target="_blank" rel="nofollow noreferrer noopener">https://gtacknowledge.extremenetworks.com/articles/How_To/NAC-Troubleshooting-Tips-common-tcpdump-co...</A><BR /> <BR /> Note to decode with Wireshark, you will need to add in the SNMP credentials manually. Fri, 10 Jun 2016 19:23:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36314#M4193 Mike_Thomas 2016-06-10T19:23:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36315#M4194 Thank you, ill definitely try that<BR /> Fri, 10 Jun 2016 19:23:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/snmp-ifutilization-warning-notifications/m-p/36315#M4194 Joseph_Burnswor 2016-06-10T19:23:00Z