As described earlier, when Wireshark indicates an event that may cause a problem but is still inside the normal behavior of the protocol, it will be under the note category. TCP retransmission, for example, will be displayed under the notes bar, because even though it is a critical problem that slows down the network, it is still under the normal behavior of TCP.