wireshark: write output file to correct directory

Reviewer: trivial