hi appears this tcpdump -i any -c5 src 192.168.2.86
tcpdump: data link type LINUX_SLL2
dropped privs to tcpdump
tcpdump: verbose output suppressed, use -v[v]… for full protocol decode
listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes
16:25:33.412571 eno1 In IP SIP-T46G.localdomain.sip > srv3.localdomain.sip: SIP: REGISTER sip:192.168.2.173:5060 SIP/2.0
16:25:33.423291 eno1 In IP SIP-T46G.localdomain.sip > srv3.localdomain.sip: SIP: REGISTER sip:192.168.2.173:5060 SIP/2.0
16:25:33.444330 eno1 In IP SIP-T46G.localdomain.sip > srv3.localdomain.sip: SIP: REGISTER sip:192.168.2.173:5060 SIP/2.0
16:25:33.455075 eno1 In IP SIP-T46G.localdomain.sip > srv3.localdomain.sip: SIP: REGISTER sip:192.168.2.173:5060 SIP/2.0
16:25:33.476299 eno1 In IP SIP-T46G.localdomain.sip > srv3.localdomain.sip: SIP: REGISTER sip:192.168.2.173:5060 SIP/2.0
5 packets captured
8 packets received by filter
0 packets dropped by kernel