$ 0 0 > You simply dump the raw packet data into a file. They're also writing it through libpcap - see the `handle.dumpOpen` and `dumper.dumpRaw` calls.