How to set capabilities with setcap command?

I would like to set up wpa_supplicant and *openvpn* to run as non-root user, like the recommended setup for *wireshark*. I can't find any documentation for what +eip in this example means: sudo setcap cap_net_raw,cap_net_admin,cap_dac_override+eip /usr/bin/dumpcap