Use PCredz to extract in PCapng:

• Credit card numbers
• POP credentials
• SMTP credentials
• IMAP credentials
• SNMP community strings
• FTP credentials
• Credentials from HTTP NTLM/Basic headers, as well as HTTP Forms
• NTLMv1/v2 hashes from various traffic including DCE-RPC, SMBv1/2, LDAP, MSSQL, and HTTP
• Kerberos (AS-REQ Pre-Auth etype 23) hashes

Note: Sometimes only Docker version works.