If TotalView is monitoring a router via one IP address, yet the device sends back syslog messages with a different interface’s IP address, TotalView may not report the correct IP address on alerts. This can be fixed by entering the following command on the router:
logging source-interface <interface>
logging source-interface Fa0/2
This will have the router send syslog messages with the IP address that is assigned to Fa0/2.