In the case where SW3 VPS is 'unable to set CAP_SETFCAP effective capability: Operation not permitted' (example: Ubuntu VPS unable to complete Wireshark installation), do the following:
ssh to Host for this VPS
in the file '/home/lxc/<vpsname>/config', comment out this line so the end result is '#lxc.cap.drop = setfcap'.
restart VPS
This is not recommended if someone else can catch traffic on the same bridge and this is why it is not set as default option.