TCP_App shown for FTP traffic

We have some passive ftp transfers and they are being resolved as TCP_App, we believe that this is due to the port not being shown as 20. Is this happening at the netflow analyzer end or the information received from the router?

Regards

Mark