This post contains some dumpcap snippets for capturing packets in the pcap format to be analized later on wireshark.

dumpcap -f "ether host 00:22:68:18:b9:13 or broadcast" -w pentest -b filesize:10000