Wireshark shows SIP traffic right out of the box, so this would likely be an issue with the way capture is setup. Either the switch mirror configuration, VLAN tagging, etc.