These are captured by (a modified) wireshark's dumpcap utility.
The files are in libpcap data format.