Where Does Smart Switch Store Backups On Mac

Wireshark captures packets from network interface the same way as tcpdump is, so you won't see different results. You might check this yourself: tcpdump [...] -w dump_file.pcap, transfer the resulting file to the other machine that has wireshark and load it there for review.