In the Passive mode of the Analysis, the feature measures Application traffic of voice media ports (RTP), which is negotiated dynamically by the SIP signaling protocol. The Analysis is pre-configured to get that dynamic media information based on the default port deployment of SIP, which is 5060. However, it is possible that the SIP deployment is using a non-standard signaling port.
