The total volume of received and sent bytes per second on the network interface has exceeded the threshold percentage of the interface’s total bandwidth, over multiple samples.

Either the system has recently experienced a significant increase in network activity, and this spike has resulted in exceeding the threshold, or the system’s network utilization has been steadily increasing over time and has finally reached a point of going over the threshold.

The other possibility is that the network interface is set to automatically renegotiate the current bandwidth, and the bandwidth that was automatically negotiated is lower.

To further investigate the issue determine the following:

• Is the network interface configured for automatic negotiation? If so, has the bandwidth changed recently?

• Have the data volumes recently jumped or has the increase been progressively growing over time? If the collection rule for this counter or the received bytes and sent bytes collection rules are enabled, then review the historical data for this counter in views or reports.

• Is the data being received or the data being sent, the larger contributor to the overall bandwidth use? Do multiple sources or applications account for the data, or is it coming from relatively few sources? Use the "IO Read" and "IO Write" counters of the "Process" object in performance monitor to identify which processes are sending and receiving large amounts of data. Also, tools like NETSTAT.EXE and Network Monitor, can help in identifing what sources and applications are using bandwidth.

Based on the findings from further investigation, resolutions may vary and could include one of the following:

• Reconfigure the network interface and/or the networking device port that it is connected, to ensure that the network bandwidth is maximized.

• Scale back the volume of data that the system is sending.

• Scale back the volume of data that the system is receiving from external sources.

• Upgrade the network interface or the underlying network that the interface is connected to, to allow for the increased traffic.