<div dir="ltr"><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, May 19, 2020 at 7:10 AM Mauricio Tavares <<a href="mailto:raubvogel@gmail.com">raubvogel@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">2. Is there a verbose option (I am thinking on the -v[v[v]] in<br>
ansible/ssh) when you call<br>
<br>
zeek -r pcap policy<br>
<br>
I do not mean the -d option, as it seems to behave like gdb.<br></blockquote><div><br></div><div> One option I use is `zeek -r pcap misc/dump-events my-test-policy.zeek`. See: <a href="https://docs.zeek.org/en/current/scripts/policy/misc/dump-events.zeek.html">https://docs.zeek.org/en/current/scripts/policy/misc/dump-events.zeek.html</a></div></div></div>