# Proving SSL need

I need to prove the need we have to install SSL certificates in our webservers.

For that I've been requested to try obtaining sample credentials (in lab enviroment) during a http authentication process.

How can I do this?

Assuming your server is a Linux box, run something like tcpdump -i any -s 1600 -w /tmp/dump port 80 on it during a user authentication, and then go digging through /tmp/dump to find the credentials.