False Alerting Reporting

I am having an issue with the Alert Profiles. I have configured Inbound traffic with no criteria to email me when traffic utilization exceeds 70%, 80%, and 90% on a DS3. I have yet to see my traffic get over 50% yet I am getting pages stating that my traffic has exceeded.

Could this be broke and its looking at an application instead of the whole group? I run one application which is 80% of my traffic. Could this be triggering my alarms?

I attached my pdf file showing that I received a Warning alert. And here is my alert profile. Am I doing something wrong? Thanks.

Harold

Alert Profile Name: LV - Internap Inbound Utilization

1. Select Source:
Selected Interfaces: 24.204.9.4 (Serial4/1/0 - Internap)

2. Define Alert Criteria:
In Traffic
No Criteria Application Port Use this option for over all link utilization.
3. Define Thresholds and Action:

If the Traffic Utilization exceeds...
70% 2times 2minutes; Severity Warning Select Action Email
80% 2times 2minutes; Severity Major Select Action Email
90% 2times 2minutes; Severity Critical Select Action Email