When reviewing / playing back the recording for a session not all Events are listed / captured.
In order to Event Capture on *Nix systems, the Capture commands TPAM uses (e.g. ps -ef) will run every 1 second. Event capture will not capture non-persistent processes (i.e. processes that execute and exit within 1 second).