Extracting Credentials:

HTTP Basic Authentication transmits credentials in Base64 encoding (easily decoded). - Filter: `http.authorization` - FTP credentials are transmitted in plaintext. - Filter: `ftp.request.command == "USER" || ftp.request.command == "PASS"`