uPnP snitch? Is there any way to "see" pnp requests?

that seems indeed like the easiest solution, if it does log everything this nicely.

I just noticed the default ACLs will not add ipv6 rules, and the default is to accept

...from the line above i think i should enable debug logs too.