Bash – Tcpdump & Egrep & ngrep & Ettercap Command Find HTTP pcap File Username And Password

tcpdump -r Eth/test4.pcap port http | egrep -i 'pass=|pwd=|log=|login=|user=|username=|pw=|passw=|passwd=|password=|pass:|user:|username:|password:|login:|pass |user ' --color=auto --line-buffered -B20

ngrep -I file.pcap -q -i 'pass=|pwd=|log=|login=|user=|username=|pw=|passw=|passwd=|password=|pass:|user:|username:|password:|login:|pass |user |auth'

ngrep -I file.pcap -q -i '[&\s?](?:login|user(?:name|)|p(ass(?:word|wd|)|w|wd))[\s:=]\s?([^&\s]*)'

ettercap -T -q -r file.pcap

ngrep -q -I file.pcap | grep -i user