If TotalView is monitoring a router via one IP address, yet the device sends back syslog messages with a different interface’s IP address, TotalView may not report the correct IP address on alerts.  This can be fixed by entering the following command on the router: 

logging source-interface <interface> 

For example:

logging source-interface Fa0/2

This will have the router send syslog messages with the IP address that is assigned to Fa0/2.