哪个 tshark 选项会从现有捕获文件读取数据包,而不是从实时接口读取?
tshark
-w suspicious_traffic.pcap
-r suspicious_traffic.pcap
-e suspicious_traffic.pcap
-i suspicious_traffic.pcap