On macOS 15.7, you may use

tcpdump -i <device> -s 64 -w <filename> host <server IP> and tcp port <port>

to capture all TCP header information including the handshake packets in full. The default -s snaplen of 262144 bytes is too expensive for capturing TCP connections transferring a large amount of data.