If you must eavesdrop on network traffic inside a distant locale -- as an example, after you've founded a beachhead on inner techniques -- TShark and tcpdump let you seize packets via the command line.
This technique https://www.youtube.com/watch?v=BEQ56vpzbok