During Dictionary Attack, how can I Capture the attempted usernames and passwords?
I don't know an answer to the question you asked, but from an IT security best practices perspective: 

Run VNC on a local interface only. Use a key-based vpn or ssh tunnel to access the local interface remotely.

Is there a reason you need to run VNC on a non-secure interface?