The following filters can be used to detect any problem/errors in e-mail communications:
smtp.response.code >= 400 pop.response.indicator == "-ERR"
Display filters to look for e-mail credentials are as follows:
pop.request.command == "USER" || pop.request.command == "PASS" imap.request contains "login" smtp.req.command == "AUTH"