Debug src ip ", "Received incoming SIP connection from unknown peer to 123") in new stack"

Checkout

sngrep

it will see traffic even before it hits asterisk