Wireshark

Follow HTTP traffic

% sudo tshark -i en5 -Y 'http.request.method == "GET"' "port 80"

Capture all outgoing requests and responses

% sudo tshark -i en5 -f "port 80" -w foo.cap