1 | initial version |
Make a capture at an appropriate point in the network, client or server or somewhere in between which carries the traffic (e.g. switch or router) and apply a capture filter for SMTP, e.g. port 25
.
If the capture point will see SMTP traffic for clients other than the target you might have to add an additional filter for the target host IP.