FTP display filters

Some common FTP display filters are as follows:

  • FTP request command:
    • ftp.request.command == <"requested command"> - ftp.request.command == "USER"
  • FTP or FTP data—FTP commands (port 21) or data (port 20 or variable):
    • ftp
    • ftp-data