If TotalView is monitoring a router via one IP address, yet the device sends back syslog messages with a different interface’s IP address, TotalView may not report the correct IP address on alerts.  This can be fixed by entering the following command on the router: 

logging source-interface <interface>

For example: 

logging source-interface Fa0/2 

This will have the router send syslog messages with the IP address that is assigned to Fa0/2.