dumpcap man page with the -k options
https://www.wireshark.org/docs/wsug_html_chunked/AppToolsdumpcap.html