- Get the right interface ``` $ networksetup -listallhardwareports ``` - Start trace ``` $ sudo tcpdump -i en0 -w trace.pcap ``` See also: https://developer.apple.com/documentation/network/recording_a_packet_trace