  include <abstractions/base>

  owner /tmp/wireshark_*.pcapng rwlk,

  /dev/ r,

  signal (receive) peer=wireshark-tshark,
  signal (receive) peer=wireshark,