See the file man3/pcap_dump_open.3pcap.