reasoning is that the side who changes delay should hear the crackling

Using the actual connection is the only reliable way to know source IP and port because of NATing that sometimes mangles
ports

manages internal lookup table for src-dest pairs