`sudo /Applications/VMware\ Fusion.app/Contents/Library/vmnet-sniffer <if>` -e prints ethernet headers -w writes to pcap file specify the interface name, eg vmnet2