answered 2020-04-02 21:57:49 +0000
dumpcap man page with the -k options
https://www.wireshark.org/docs/wsug_html_chunked/AppToolsdumpcap.html