I've been tracking this for a few weeks now, but it seems to be a bit difficult to pin down...
Once every week or so, we notice a huge spike in the frequency that this client event is generated.
Initially, I thought this might be related to the differences between regular user accounts and the system account, but I'm not entirely convinced as I have been unable to recreate the problem--short of yanking the cable from the NIC.
I'm leaning to something server-side, simply because we couldn't get that many systems to do something at the same time even if we wanted.
Any thoughts, or similar experiences?