WIRESHARK

several wireshark dissectors (FTP, HTTP, IMAP, pop and SMTP) are programmed to extract cleartext passwords from the capture file. this feature only works on versions 3.1 and later.

root@dco:~$ wireshark &

WireShark > File > Open > Desktop/exercise-pcaps/bonus/Bonus-exercise.pcap
WireShark > Tools > Credentials
 ...