I just went back and looked at the video. I can see in the video I'm not trying to intercept anything from within that container. I just used it to provide access into the network. When I went frame by frame, I could see that it fails with command ip not found
I also see the nameserver bits fail too:
I think the reply @qrkourier made here Ziti Tunneller complaining "not find a way to configure system resolver" - #8 by qrkourier is probably what you'll need to do.
I think it'd be more useful to continue learning how to intercept packets inside docker on that thread.