Using tcpdump to Capture Traffic for Analysis in Wireshark
Use the following:
tcpdump -i <interface> -s 1500 -w <some-file>
tcpdump will only cature the first 68 bytes so you need to change the value to your packet size.
Read other posts