Ip encapsulation

I created one virtual machine on vmware workstation with network configuration mode NAT. For example, with vm (@ip, gateway ,host (@ip and gateway and public ip on router is x.x.x.x/30. Is there a tool to track that when I ping google.com from my vm I can get the flow of communication with this sample:>>>>x.x.x.x-> Can wireshark or tcpdump do this?