On macOS 15.7, you may use
tcpdump -i <device> -s 64 -w <filename> host <server IP> and tcp port <port>
to capture all TCP header information including the handshake packets in full. The default -s snaplen
of 262144 bytes is too expensive for capturing TCP connections transferring a large amount of data.