tcpdump instead IOtrace

Hi,

I am running under a docker and cannot install any NI-Visa I/O
On my PC I have NI-tools and locally can verify the VSA exchange between SW and Instrument, but not on the Docker....
The only tool available is the tcpdump and analyzing it on Wireshark.
Does anyone used it before/ know the filter to apply or has any solution how to see VISA-488.2 traffic on a docker?
Thanks in advance

Y3G