Dumpcap (and pdump) do unregister. The data is rxtx callback data is static and local to the process so it is safe.