Note events and what we can understand from them

As described earlier, when Wireshark indicates an event that may cause a problem but is still inside the normal behavior of the protocol, it will be under the note category. TCP retransmission, for example, will be displayed under the notes bar, because even though it is a critical problem that slows down the network, it is still under the normal behavior of TCP.

Getting ready

Start a capture, or open an existing file and start the expert system.

How to do it...

1. From the Analyze menu, open Expert Information.
2. The notes...