SIP Signaling is usually on port 5060.

RTP (the actual audio stream) is usually on the higher numbered ports.

There are lots of extra details, but the above is from the helicopter view.

Regards,
Norm