Looking at an operational issue where we had a small interface flap between polls, so link state between polls hasn't changed, but iFLastChange has.

Looking at the 'data' view through the UI for the port ifLastChanged doesn't appeared to have changed, and looking through the poller code it appears perhaps it is only updated on a change of operational/admin status on a port?

Would there be any use in poller updating it in the db if it was different to the existing value in the port cache ?

It would be interesting to be able to alert on 'ifLastChange' < 'some value'  .. Or just have the update in the EventLog so when having a look-see at a device it is apparent that a link flap has occurred.

A visual indicator in ports basic/detailed view for 'last change' < 'some global config value' like a little exclamation mark or something potentially could be useful to operators to 'spot'  issues.

Imagine being able to view ports, sort on 'LastChange' during an incident to 'spot' potential causes of issues?

Would any of this make sense to anyone?   

Cheers,

    Peter