Run tcpdump and forward to wireshark

From a linux (WSL) host

adb shell su -c "tcpdump -U -w - " | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -

From a windows machine, SSH to a WSL host, which is connected to the Android Phone

plink -ssh -l <USER> -pw "<PASSWORD>" -batch <HOST> "adb shell su -c 'tcpdump -U -w - '" | "C:\Program Files\Wireshark\Wireshark.exe" -k -i -