dumpcap, and I've also seen people using the
wireshark binary or even
tcpdump to collect/save network traffic.
Online it is claimed that
dumpcap hardly make a difference though. There are also some other discussion about the memory footprint.
So what is the difference between these tools? Is one newer than another one (i.e. is one "legacy" and should not be used anymore) and are there other – generally accepted – recommendations for which to use?
Edit: I've seen this question, but it just explains the basics. So if you have a use-case of just collect traffic, what should one use here? Or more general: Which tool can satisfy which use case?