We have an application which generate quite some passive mode FTP transfers. Typically, the data transfer channel is between two random TCP ports negotiated in the FTP control channel. (confirmed by traces we took)
But NBAR doesn't seem to count these data channel transfers because Unknow increases and FTP stays low.
Is this dependent on IOS release ?
