1. A method comprising: monitoring network packet traffic events for a plurality of network interfaces in a packet processing device; comparing the monitored network packet traffic events to a first activity level to determine whether at least one of the network interfaces is near an overflow state; if the network interface is near an overflow state, then generating an interrupt.