2018-11-19 13:03:08.509199 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 291
2018-11-19 13:03:08.509203 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 291
2018-11-19 13:03:08.509709 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 344
2018-11-19 13:03:08.509712 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 344
2018-11-19 13:03:08.509716 rule 0/0(match): pass out on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 344
2018-11-19 13:03:08.509720 rule 0/0(match): pass out on epair1a: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 344
2018-11-19 13:03:08.509725 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 344
2018-11-19 13:03:08.509730 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 344
2018-11-19 13:03:08.510208 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 330
2018-11-19 13:03:08.510210 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 330
2018-11-19 13:03:08.510214 rule 0/0(match): pass out on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 330
2018-11-19 13:03:08.510217 rule 0/0(match): pass out on epair1a: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 330
2018-11-19 13:03:08.510223 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 330
2018-11-19 13:03:08.510227 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 330
2018-11-19 13:03:08.510692 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 291
2018-11-19 13:03:08.510695 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 291
2018-11-19 13:03:08.510699 rule 0/0(match): pass out on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 291
2018-11-19 13:03:08.510703 rule 0/0(match): pass out on epair1a: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 291
2018-11-19 13:03:08.510708 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 291
2018-11-19 13:03:08.510713 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 291
2018-11-19 13:03:08.511214 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 360
2018-11-19 13:03:08.511217 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 360
2018-11-19 13:03:08.511221 rule 0/0(match): pass out on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 360
2018-11-19 13:03:08.511225 rule 0/0(match): pass out on epair1a: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 360
2018-11-19 13:03:08.511231 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 360
2018-11-19 13:03:08.511235 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 360

2018-11-19 13:03:37.385501 rule 1/0(match): pass in on epair1a: 10.0.10.31.35061 > 209.18.47.61.53: 33427+[|domain]
2018-11-19 13:03:37.385509 rule 1/0(match): pass in on bridge10: 10.0.10.31.35061 > 209.18.47.61.53: 33427+[|domain]
2018-11-19 13:03:37.385516 rule 0/0(match): pass out on bridge10: 10.0.10.31.35061 > 209.18.47.61.53: 33427+[|domain]
2018-11-19 13:03:37.385521 rule 0/0(match): pass out on xl0: 10.0.10.31.35061 > 209.18.47.61.53: 33427+[|domain]
2018-11-19 13:03:37.460921 rule 0/0(match): pass in on xl0: 209.18.47.61.53 > 10.0.10.31.35061: 33427[|domain]
2018-11-19 13:03:37.460924 rule 0/0(match): pass in on bridge10: 209.18.47.61.53 > 10.0.10.31.35061: 33427[|domain]
2018-11-19 13:03:37.460928 rule 1/0(match): pass out on bridge10: 209.18.47.61.53 > 10.0.10.31.35061: 33427[|domain]
2018-11-19 13:03:37.460931 rule 1/0(match): pass out on epair1a: 209.18.47.61.53 > 10.0.10.31.35061: 33427[|domain]

2018-11-19 13:03:37.462077 rule 1/0(match): pass in on epair1a: 10.0.10.31 > 96.47.72.84: ICMP echo request, id 33287, seq 0, length 64
2018-11-19 13:03:37.462085 rule 1/0(match): pass in on bridge10: 10.0.10.31 > 96.47.72.84: ICMP echo request, id 33287, seq 0, length 64
2018-11-19 13:03:37.462091 rule 0/0(match): pass out on bridge10: 10.0.10.31 > 96.47.72.84: ICMP echo request, id 33287, seq 0, length 64
2018-11-19 13:03:37.462096 rule 0/0(match): pass out on xl0: 10.0.10.31 > 96.47.72.84: ICMP echo request, id 33287, seq 0, length 64

2018-11-19 13:03:37.501042 rule 0/0(match): pass in on xl0: 96.47.72.84 > 10.0.10.31: ICMP echo reply, id 33287, seq 0, length 64
2018-11-19 13:03:37.501045 rule 0/0(match): pass in on bridge10: 96.47.72.84 > 10.0.10.31: ICMP echo reply, id 33287, seq 0, length 64
2018-11-19 13:03:37.501049 rule 1/0(match): pass out on bridge10: 96.47.72.84 > 10.0.10.31: ICMP echo reply, id 33287, seq 0, length 64
2018-11-19 13:03:37.501052 rule 1/0(match): pass out on epair1a: 96.47.72.84 > 10.0.10.31: ICMP echo reply, id 33287, seq 0, length 64

2018-11-19 13:03:38.481771 rule 1/0(match): pass in on epair1a: 10.0.10.31 > 96.47.72.84: ICMP echo request, id 33287, seq 1, length 64
2018-11-19 13:03:38.481775 rule 1/0(match): pass in on bridge10: 10.0.10.31 > 96.47.72.84: ICMP echo request, id 33287, seq 1, length 64
2018-11-19 13:03:38.481780 rule 0/0(match): pass out on bridge10: 10.0.10.31 > 96.47.72.84: ICMP echo request, id 33287, seq 1, length 64
2018-11-19 13:03:38.481784 rule 0/0(match): pass out on xl0: 10.0.10.31 > 96.47.72.84: ICMP echo request, id 33287, seq 1, length 64
2018-11-19 13:03:38.519961 rule 0/0(match): pass in on xl0: 96.47.72.84 > 10.0.10.31: ICMP echo reply, id 33287, seq 1, length 64
2018-11-19 13:03:38.519965 rule 0/0(match): pass in on bridge10: 96.47.72.84 > 10.0.10.31: ICMP echo reply, id 33287, seq 1, length 64
2018-11-19 13:03:38.519969 rule 1/0(match): pass out on bridge10: 96.47.72.84 > 10.0.10.31: ICMP echo reply, id 33287, seq 1, length 64
2018-11-19 13:03:38.519971 rule 1/0(match): pass out on epair1a: 96.47.72.84 > 10.0.10.31: ICMP echo reply, id 33287, seq 1, length 64

2018-11-19 13:03:40.048944 rule 1/0(match): pass in on xl0: 10.0.10.5.5353 > 224.0.0.251.5353: 0*- [0q] 4/0/3[|domain]
2018-11-19 13:03:40.048963 rule 1/0(match): pass in on bridge10: 10.0.10.5.5353 > 224.0.0.251.5353: 0*- [0q] 4/0/3[|domain]
2018-11-19 13:03:40.048971 rule 0/0(match): pass out on bridge10: 10.0.10.5.5353 > 224.0.0.251.5353: 0*- [0q] 4/0/3[|domain]
2018-11-19 13:03:40.048979 rule 0/0(match): pass out on epair1a: 10.0.10.5.5353 > 224.0.0.251.5353: 0*- [0q] 4/0/3[|domain]
2018-11-19 13:03:40.048999 rule 1/0(match): pass in on bridge10: 10.0.10.5.5353 > 224.0.0.251.5353: 0*- [0q] 4/0/3[|domain]
2018-11-19 13:03:40.049013 rule 1/0(match): pass in on xl0: 10.0.10.5.5353 > 224.0.0.251.5353: 0*- [0q] 4/0/3[|domain]
2018-11-19 13:03:40.050092 rule 1/0(match): pass in on xl0: fe80::b6bf:f6ff:fe4b:bb91.5353 > ff02::fb.5353: [|domain]
2018-11-19 13:03:40.050099 rule 1/0(match): pass in on bridge10: fe80::b6bf:f6ff:fe4b:bb91.5353 > ff02::fb.5353: [|domain]
2018-11-19 13:03:40.050105 rule 0/0(match): pass out on bridge10: fe80::b6bf:f6ff:fe4b:bb91.5353 > ff02::fb.5353: [|domain]
2018-11-19 13:03:40.050110 rule 0/0(match): pass out on epair1a: fe80::b6bf:f6ff:fe4b:bb91.5353 > ff02::fb.5353: [|domain]
2018-11-19 13:04:09.508882 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 334
2018-11-19 13:04:09.508903 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 334
2018-11-19 13:04:09.508912 rule 0/0(match): pass out on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 334
2018-11-19 13:04:09.508922 rule 0/0(match): pass out on epair1a: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 334
2018-11-19 13:04:09.508945 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 334
2018-11-19 13:04:09.508959 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 334
2018-11-19 13:04:09.511269 rule 1/0(match): pass in on xl0: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 279
2018-11-19 13:04:09.511273 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 279
2018-11-19 13:04:09.511277 rule 0/0(match): pass out on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 279
2018-11-19 13:04:09.511281 rule 0/0(match): pass out on epair1a: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 279
2018-11-19 13:04:09.511287 rule 1/0(match): pass in on bridge10: 192.168.1.1.1900 > 239.255.255.250.1900: UDP, length 279