Some common FTP display filters are as follows:

• FTP request command:
  • ftp.request.command == <"requested command"> - ftp.request.command == "USER"
• FTP or FTP data—FTP commands (port 21) or data (port 20 or variable):
  • ftp
  • ftp-data