Can you get the output of netstat -I emX -d? You don't need to run that when the problem is happening -- you just need to run it on the machine after it exhibits the issue without any reboots in the interim. I suspect that you are seeing the em TX queue fill up. If so you should see output drops reported by the em interface.