rvictl -s <-udid->
// This adds a new virtual network interface xxxxxx.
ifconfig -l
// Get the list of interfaces again, and you can see the xxxxxx
sudo tcpdump -i xxxxxx -w ./output.pcap
// stop
rvictl -x <-udid->
feed wireshark with output.pcap 🏃