*) note.md, add wireshark note