For anyone else capturing #USB on #macOS on Apple Silicon:
It does work, you just have to disable SIP entirely first (individual flags don't work, need csrutil disable)
You need to manually set the correct interface up, e.g. sudo ifconfig XHC2 up
For identifying a specific device, the easiest way is to correlate with IORegistryExplorer.
For example:
iPhone@02100000
^
XHC interface
Once you start the capture in Wireshark, you can filter to just that device using
usb.darwin.location_id == 0x02100000
