fix tshark path discovery on win
auditor is required to have tshark