I have seen this in a couple of instances:
1) The trap was sent from DFM and the fix was to adjust thresholds accordingly in DFM so that it didn't send the alerts (or disable the in here). The trap was actually forwarded from DFM, but looked like it was directly from the device
2) RMON is configured on the device with a threshold and you can adjust the rmon configuration