Packet Capture:
On host machine:
ssh -L 8889:localhost:8888 <guest_username>@<guest_ip> -N
Now, the service running on port 8888 in the guest VM is mapped to port 8889 of localhost and can be accessed by going to http://localhost:8889
Packet Capture:
The difference in the packet captures is that with tunneling enabled, the transmitted data is encrypted and when it is disabled, it is in plaintext form.