You can have a look here:
https://www.wireshark.org/docs/wsug_html_chunked/AppToolstcpdump.html
- Download a ARM version of TCPDUMP and transfer to the module
static-binaries/tcpdump at master · andrew-d/static-binaries · GitHub - chmod 777 tcpdump_arm
- /home/root/tcpdump_arm -s0 -i eth0 -w /tmp/test.pcap