root@klingon:~# tcpdump -i br0 -p -n -A port 27020|grep -i username -C5
10:53:59.559494 IP 47.54.255.78.58761 > 192.99.15.220.27020: Flags [P.], seq 1:127, ack 1, win 16425, length 126
E...O.@.w.../6.N.c....i.........P.@).I..{
  "id": "query_remote_capabilities",
  "rid": 1,
  "auth": {
    "username": "kashikoi22",
    "password": "XXXX"
  }
}


--
10:53:59.593150 IP 47.54.255.78.58761 > 192.99.15.220.27020: Flags [P.], seq 127:273, ack 357, win 16336, length 146
E...O.@.w.../6.N.c....i....a....P.?..5..{
  "id": "push_chat",
  "rid": 2,
  "auth": {
    "username": "kashikoi22",
    "password": "XXXX"
  },
  "data": {
    "enable": true
  }
^C268 packets captured
269 packets received by filter
0 packets dropped by kernel