Which tshark option reads packets from an existing capture file instead of a live interface?
tshark
-e suspicious_traffic.pcap
-r suspicious_traffic.pcap
-i suspicious_traffic.pcap
-w suspicious_traffic.pcap