# \- see all triggered events on a given pcap file

**URL:** https://community.zeek.org/t/see-all-triggered-events-on-a-given-pcap-file/4864
**Category:** Zeek
**Created:** [May 28, 2017, 2:36pm UTC](https://community.zeek.org/t/see-all-triggered-events-on-a-given-pcap-file/4864 "2017-05-28T14:36:16Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![william\_de\_ping](https://avatars.discourse-cdn.com/v4/letter/w/b19c9b/32.png) [@william\_de\_ping](https://community.zeek.org/u/william_de_ping)
#### Post date: [May 28, 2017, 2:36pm UTC](https://community.zeek.org/t/see-all-triggered-events-on-a-given-pcap-file/4864/1 "2017-05-28T14:36:16Z")

</div>

Hi all,

Does anyone know a way to get a list of all triggered events given a pcap file ?

Currently what I do is just print some indicative message for each suspected relevant events (quit tedious task)

Thanks

B

---

<div class="post-metadata">

### Author: ![Keith\_Lehigh](https://avatars.discourse-cdn.com/v4/letter/k/d9b06d/32.png) [@Keith\_Lehigh](https://community.zeek.org/u/Keith_Lehigh)
#### Post date: [May 28, 2017, 3:06pm UTC](https://community.zeek.org/t/see-all-triggered-events-on-a-given-pcap-file/4864/2 "2017-05-28T15:06:35Z")

</div>

policy/misc/dump-events.bro does exactly what you want.

- Keith

---

<div class="post-metadata">

### Author: ![william\_de\_ping](https://avatars.discourse-cdn.com/v4/letter/w/b19c9b/32.png) [@william\_de\_ping](https://community.zeek.org/u/william_de_ping)
#### Post date: [May 28, 2017, 3:37pm UTC](https://community.zeek.org/t/see-all-triggered-events-on-a-given-pcap-file/4864/3 "2017-05-28T15:37:41Z")

</div>

Thank you very much !

it works great 🙂

---

<div class="post-metadata">

### Author: ![johanna](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@johanna](https://community.zeek.org/u/johanna)
#### Post date: [May 30, 2017, 5:24pm UTC](https://community.zeek.org/t/see-all-triggered-events-on-a-given-pcap-file/4864/4 "2017-05-30T17:24:14Z")

</div>

Note that this only will work for events that are already used in other  
scripts. If an event is not used at all, it will not show up in the output  
of dump-events.

Johanna

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/see-all-triggered-events-on-a-given-pcap-file/4864/5 "2022-05-06T15:44:59Z")

</div>


