Putting your real Internet public addesses in a public forum is asking for trouble. Enough said.
Try putting the "port 5060" before any of the dash options. It's just a crazy idea but I always put my host and port parameters before any dash parameters. Of course I prefer to use Ethereal to tcpdump anyway.
/usr/sbin/tcpdump port 5060 -i eth4 -n