Capturing with tcpdump for viewing with Wireshark

 

$ tcpdump -i <interface> -s 65535 -w <some-file>

https://www.wireshark.org/docs/wsug_html_chunked/AppToolstcpdump.html