Email spammer

We have an infected computer that is sending spam using a current emplyees email address. Is it possible to use wireshark and setup a capture filter by email address?

Thanks
Mark