RTP opens two ports for communication. One for the media stream (an even port number) and one for control (QoS feedback and media control) - RTCP. The port numbers are not hard defined, it depends very much upon the application.

This SonicWALL signature identifies legitimate Real-Time Protocol (RTP) with encoded Payload traffic over UDP.