Trying to set up according to: https://wiki.mikrotik.com/wiki/Ethereal/Wireshark

And other variations such as using trafr

I'm using RouterOS 6.38.5 and Wireshark 2.2.5 from Ubuntu's Latest Stable PPA

When the sniffer is running I get overwhelmed by a vast number of Malformed Packets. Have not yet figured out how to filter out the Malformed Packets to see if anything interesting is left.