Make a capture at an appropriate point in the network, client or server or somewhere in between which carries the traffic (e.g. switch or router) and apply a capture filter for SMTP, e.g. port 25.