tcpdump -D // list all interfaces
tcpdump -i <interface> // sniff on <interface>

// sip dialogues
tcpdump -nq -s 0 -i eth0 -w dump.pcap port 5060