I would like to sniff the traffic of a running container on a Docker Swarm on an overlay network without stopping or interfering with the container. Is there a simple way to do it?

At the moment the only solution I have is by sniffing the traffic network on the node (using tcpdump in a container with --net host) but I want something more generic that doesn't need --privileged to run.