Capture packets using device en1 and save to 1.pcap
sudo tcpdump -Ii en1 -w 1.pcap
Show the captured packets in a readable format
tcpdump -qns 0 -X -r 1.pcap