Again, we have the following setup as for the telnet from Moe to Larry, that is why we just show the annotated output of captured.ftp , or rather, that part of the file, which shows how exposed the user name and the password are.  The FTP protocol does not require (or allow, for that matter) that the user name and the password are encoded when transmitted.  They are just transmitted as line of ascii characters, terminated by a CRNL (carriage-return, new-line) pair, just like the rest of the FTP commands.  That is why, at the end of each command, you will see the CRNL pair.

Packet 1:
14:54:59.097818 larry.baylor.edu.ftp > moe.baylor.edu.1072: P 1:97(96) ack 1 win 32120 <nop,nop,timestamp 77155005 77061563> (DF) [tos 0x10]
    4510 0094 f6e8 4000 4006 1933 813e 93de
    813e 93dd 0015 0430 647c 7b96 5742 1ed8
    8018 7d78 2f2a 0000 0101 080a 0499 4abd
    0497 ddbb 3232 3020 6c61 7272 792e 6261
               2 2  0    l a  r r  y .  b a
    796c 6f72 2e65 6475 2046 5450 2073 6572
     y l  o r  . e  d u    F  T P    s  e r
    7665 7220 2856 6572 7369 6f6e 2077 752d
     v e  r    ( V  e r  s i  o n    w  u -
    322e 342e 322d 5652 3137 2831 2920 4d6f
     2 .  4 .  2 -  V R  1 7  ( 1  )    M o
    6e20 4170 7220 3139 2030 393a 3231 3a35
     n    A p  r    1 9    0  9 :  2 1  : 5
    3320 4544 5420 3139 3939 2920 7265 6164
     3    E D  T    1 9  9 9  )    r e  a d
    792e 0d0a
     y . CRNL

    Standard greeting command with number 220.  For a list of the FTP commands, please refer to the RFC for FTP.

Packet 2:
14:54:59.098380 moe.baylor.edu.1072 > larry.baylor.edu.ftp: . ack 97 win 32120 <nop,nop,timestamp 77061569 77155005> (DF) [tos 0x10]
    4510 0034 0cfa 4000 4006 0382 813e 93dd
    813e 93de 0430 0015 5742 1ed8 647c 7bf6
    8010 7d78 428b 0000 0101 080a 0497 ddc1
    0499 4abd

Packet 3:
14:54:59.951742 moe.baylor.edu.1072 > larry.baylor.edu.ftp: P 1:13(12) ack 97 win 32120 <nop,nop,timestamp 77061654 77155005> (DF) [tos 0x10]
    4510 0040 0cfb 4000 4006 0375 813e 93dd
    813e 93de 0430 0015 5742 1ed8 647c 7bf6
    8018 7d78 a924 0000 0101 080a 0497 de16
    0499 4abd 5553 4552 206c 616b 6f76 0d0a
               U S  E R    l  a k  o v CRNL

Packet 4:
14:54:59.951823 larry.baylor.edu.ftp > moe.baylor.edu.1072: . ack 13 win 32120 <nop,nop,timestamp 77155091 77061654> (DF) [tos 0x10]
    4510 0034 f6e9 4000 4006 1992 813e 93de
    813e 93dd 0015 0430 647c 7bf6 5742 1ee4
    8010 7d78 41d4 0000 0101 080a 0499 4b13
    0497 de16

Packet 5:
14:54:59.967635 larry.baylor.edu.ftp > moe.baylor.edu.1072: P 97:131(34) ack 13 win 32120 <nop,nop,timestamp 77155092 77061654> (DF) [tos 0x10]
    4510 0056 f6ea 4000 4006 196f 813e 93de
    813e 93dd 0015 0430 647c 7bf6 5742 1ee4
    8018 7d78 2a41 0000 0101 080a 0499 4b14
    0497 de16 3333 3120 5061 7373 776f 7264
              3 3  1    P a  s s  w o  r d
    2072 6571 7569 7265 6420 666f 7220 6c61
       r  e q  u i  r e  d    f o  r    l a
    6b6f 762e 0d0a
     k o  v . CRNL

Packet 6:
14:54:59.982146 moe.baylor.edu.1072 > larry.baylor.edu.ftp: . ack 131 win 32120 <nop,nop,timestamp 77061658 77155092> (DF) [tos 0x10]
    4510 0034 0cfc 4000 4006 0380 813e 93dd
    813e 93de 0430 0015 5742 1ee4 647c 7c18
    8010 7d78 41ad 0000 0101 080a 0497 de1a
    0499 4b14

Packet 7:
14:55:03.807869 moe.baylor.edu.1072 > larry.baylor.edu.ftp: P 13:25(12) ack 131 win 32120 <nop,nop,timestamp 77062040 77155092> (DF) [tos 0x10]
    4510 0040 0cfd 4000 4006 0373 813e 93dd
    813e 93de 0430 0015 5742 1ee4 647c 7c18
    8018 7d78 aa55 0000 0101 080a 0497 df98
    0499 4b14 5041 5353 2062 6262 6262 0d0a
               P A  S S    A  A A  A A CRNL

    Oups, I was just too lazy to type in my real password, which was just 01234. and as a result, in the next message from the server, my request for access will be denied.

Packet 8:
14:55:03.818989 larry.baylor.edu.ftp > moe.baylor.edu.1072: . ack 25 win 32120 <nop,nop,timestamp 77155478 77062040> (DF) [tos 0x10]
    4510 0034 f6eb 4000 4006 1990 813e 93de
    813e 93dd 0015 0430 647c 7c18 5742 1ef0
    8010 7d78 3ea1 0000 0101 080a 0499 4c96
    0497 df98

Packet 9:
14:55:04.841232 larry.baylor.edu.ftp > moe.baylor.edu.1072: P 131:153(22) ack 25 win 32120 <nop,nop,timestamp 77155580 77062040> (DF) [tos 0x10]
    4510 004a f6ec 4000 4006 1979 813e 93de
    813e 93dd 0015 0430 647c 7c18 5742 1ef0
    8018 7d78 90e4 0000 0101 080a 0499 4cfc
    0497 df98 3533 3020 4c6f 6769 6e20 696e
               5 3  0    L o  g i  n    i n
    636f 7272 6563 742e 0d0a
     c o  r r  e c  t . CRNL

Packet 10:
14:55:04.848632 moe.baylor.edu.1072 > larry.baylor.edu.ftp: P 25:31(6) ack 153 win 32120 <nop,nop,timestamp 77062144 77155580> (DF) [tos 0x10]
    4510 003a 0cfe 4000 4006 0378 813e 93dd
    813e 93de 0430 0015 5742 1ef0 647c 7c2e
    8018 7d78 89f7 0000 0101 080a 0497 e000
    0499 4cfc 5359 5354 0d0a
               S Y  S T CRNL

Packet 11:
14:55:04.849455 larry.baylor.edu.ftp > moe.baylor.edu.1072: P 153:191(38) ack 31 win 32120 <nop,nop,timestamp 77155581 77062144> (DF) [tos 0x10]
    4510 005a f6ed 4000 4006 1968 813e 93de
    813e 93dd 0015 0430 647c 7c2e 5742 1ef6
    8018 7d78 d86c 0000 0101 080a 0499 4cfd
    0497 e000 3533 3020 506c 6561 7365 206c
               5 3  0    P l  e a  s e    l
    6f67 696e 2077 6974 6820 5553 4552 2061
     o g  i n    w  i t  h    U S  E R    a
    6e64 2050 4153 532e 0d0a
     n d    P  A S  S . CRNL

Packet 12:
14:55:04.862051 moe.baylor.edu.1072 > larry.baylor.edu.ftp: . ack 191 win 32120 <nop,nop,timestamp 77062146 77155581> (DF) [tos 0x10]
    4510 0034 0cff 4000 4006 037d 813e 93dd
    813e 93de 0430 0015 5742 1ef6 647c 7c54
    8010 7d78 3d8e 0000 0101 080a 0497 e002
    0499 4cfd

Packet 13:
14:55:06.101464 moe.baylor.edu.1072 > larry.baylor.edu.ftp: P 31:37(6) ack 191 win 32120 <nop,nop,timestamp 77062269 77155581> (DF) [tos 0x10]
    4510 003a 0d00 4000 4006 0376 813e 93dd
    813e 93de 0430 0015 5742 1ef6 647c 7c54
    8018 7d78 9551 0000 0101 080a 0497 e07d
    0499 4cfd 5155 4954 0d0a
               Q U  I T CRNL

Obviously I was a bit grouchy that morning.

Packet 14:
14:55:06.102172 larry.baylor.edu.ftp > moe.baylor.edu.1072: P 191:205(14) ack 37 win 32120 <nop,nop,timestamp 77155706 77062269> (DF) [tos 0x10]
    4510 0042 f6ee 4000 4006 197f 813e 93de
    813e 93dd 0015 0430 647c 7c54 5742 1efc
    8018 7d78 4da2 0000 0101 080a 0499 4d7a
    0497 e07d 3232 3120 476f 6f64 6279 652e
               2 2  1    G o  o d  b y  e .
    0d0a
    CRNL

Packet 15:
14:55:06.106074 moe.baylor.edu.1072 > larry.baylor.edu.ftp: F 37:37(0) ack 205 win 32120 <nop,nop,timestamp 77062270 77155706> (DF) [tos 0x10]
    4510 0034 0d01 4000 4006 037b 813e 93dd
    813e 93de 0430 0015 5742 1efc 647c 7c62
    8011 7d78 3c80 0000 0101 080a 0497 e07e
    0499 4d7a

Packet 17:
14:55:06.106189 larry.baylor.edu.ftp > moe.baylor.edu.1072: . ack 38 win 32120 <nop,nop,timestamp 77155706 77062270> (DF) [tos 0x10]
    4510 0034 f6ef 4000 4006 198c 813e 93de
    813e 93dd 0015 0430 647c 7c62 5742 1efd
    8010 7d78 3c80 0000 0101 080a 0499 4d7a
    0497 e07e

Packet 18:
14:55:06.106251 larry.baylor.edu.ftp > moe.baylor.edu.1072: F 205:205(0) ack 38 win 32120 <nop,nop,timestamp 77155706 77062270> (DF) [tos 0x10]
    4510 0034 f6f0 4000 4006 198b 813e 93de
    813e 93dd 0015 0430 647c 7c62 5742 1efd
    8011 7d78 3c7f 0000 0101 0