# Minimal packets to trigger events
**URL:** https://community.zeek.org/t/minimal-packets-to-trigger-events/5695
**Category:** Zeek
**Created:** [May 10, 2019, 8:54pm UTC](https://community.zeek.org/t/minimal-packets-to-trigger-events/5695 "2019-05-10T20:54:07Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Woot4moo](https://community.zeek.org/u/Woot4moo)
#### Post date: [May 10, 2019, 8:54pm UTC](https://community.zeek.org/t/minimal-packets-to-trigger-events/5695/1 "2019-05-10T20:54:07Z")
I am in the process of covering my team’s feature set and we are using Behave (Python) to generate reports. Is there a collection of minimal PCAPs that the community maintains / scapy scripts to generate minimal PCAPs to trigger the events that Zeek supports?
For example to trigger the “ssh\_server\_version(…)” event [[https://docs.zeek.org/en/stable/scripts/base/bif/plugins/Bro\_SSH.events.bif.bro.html#id-ssh\_server\_version](https://docs.zeek.org/en/stable/scripts/base/bif/plugins/Bro_SSH.events.bif.bro.html#id-ssh_server_version)] it requires 4 packets (TCP handshake + 1 additional packet)
---
### Author:  [@JustinAzoff](https://community.zeek.org/u/JustinAzoff)
#### Post date: [May 13, 2019, 7:33pm UTC](https://community.zeek.org/t/minimal-packets-to-trigger-events/5695/2 "2019-05-13T19:33:48Z")
Perhaps not minimal in all cases, but the test suite is full of pcaps.
Take a look at [https://github.com/zeek/zeek/tree/master/testing/btest/Traces](https://github.com/zeek/zeek/tree/master/testing/btest/Traces)
---
### Author:  [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/minimal-packets-to-trigger-events/5695/3 "2022-05-06T15:46:29Z")