Network Capture within VPC

Hello is there a similar service in AWS like Azure Network Watcher to be able to capture network packet to analyze traffic between a client to our web servers and so on, in particular we are trying to figure out capturing to troubleshoot a cipher mismatch issue with our customer to our environments.