Falco, Sysdig, Stratoshark, and other tools that use libscap and
libsinsp[1] read and write files which use the pcapng format and which
typically have a ".scap" filename extension.

[1] https://github.com/falcosecurity/libs/