Getting SimpleURLFilter sample to work with PIRService

[ameshkov]

Hello,

I've been experimenting with the new NEURLFilter API and so far the results are kind of strange.

SimpleURLFilter sample contains a bloom filter that seems to be built from this dataset here.

I was able to run SimpleURLFilter sample and configure it to use PIRService build from this repo as explained in the testing instructions document. I also observed the requests that iOS has been sending: requesting config and then sending /queries request.

What I haven't seen is any .deny verdict for any URL. Even when calling NEURLFilter.verdict(for: url) directly I cannot see a .deny verdict.

Is there anything wrong with the sample or is there a known issue with NEURLFilter in the current beta (beta 8) that prevents it from working?

Also, maybe you can hint at what should I look for in Console.app to troubleshoot the issue? I reckon ciphermld is the one that sends PIR requests, is there any way to make it write more verbose log?

[karulont]

There are some known issues in the beta that will be fixed in the actual release.
You can turn on Network Extension debug logging and the "PIRCheck" debug logs should show when NE performs the Bloom filter match and then PIR queries.

So the advice I gathered was to wait for final release. In the meantime you can use feedback assistant to send us sysdiagnoses (but please enable Network Extension debug logging).

[ameshkov]

Could you please check that I am troubleshooting it correctly?

Here's what I did.

Installed the debug logging profile:

Screenshot

Reproduced the issue

Basically, I installed the URL filter and verified that the PIR server receives requests:

Screenshot

Exported sysdiagnose and tried to look for PIR-related messages there:

log show --predicate 'eventMessage CONTAINS "PIRCheck"' \
  --info --debug \
  --style syslog \
  --start "2025-09-04 14:00:00" \
  --archive system_logs.logarchive

Unfortunately, there seems to be nothing about matching Bloom filter or sending PIR requests:

2025-09-04 14:18:39.982546+0300  localhost neagent[870]: [com.apple.networkextension:] <NEPIRChecker: 0xd17025a10>: -[NEPIRChecker stop] - completed unregistration with PIR for Group com.example.apple-samplecode.SimpleURLFilter<TEAM_ID>
2025-09-04 14:19:01.503250+0300  localhost neagent[870]: [com.apple.networkextension:] <NEPIRChecker: 0xd17025590>: -[NEPIRChecker start:responseQueue:completionHandler:] - enter 
    Enabled = YES
    FailClosed = NO
    AppBundleIdentifier = com.example.apple-samplecode.SimpleURLFilter<TEAM_ID>
    ControlProviderBundleIdentifier = com.example.apple-samplecode.SimpleURLFilter<TEAM_ID>.SimpleURLFilterExtension
    PrefilterFetchFrequency = 2700
    pirServerURL = https://<url-of-the-pir-server>.ngrok.app
    pirPrivacyPassIssuerURL = https://<url-of-the-pir-server>.ngrok.app
    AuthenticationToken = AAAA
    pirPrivacyProxyFailOpen = NO
    pirSkipRegistration = NO
2025-09-04 14:19:01.503369+0300  localhost neagent[870]: [com.apple.networkextension:] <NEPIRChecker: 0xd17025590>: -[NEPIRChecker start:responseQueue:completionHandler:] - Register with PIR Server (group <com.example.apple-samplecode.SimpleURLFilter<TEAM_ID>> use case <com.example.apple-samplecode.SimpleURLFilter<TEAM_ID>.url.filtering> PrivacyProxyFailOpen <1> serverURL <https://<url-of-the-pir-server>.ngrok.app> privacyPassIssuer <https://<url-of-the-pir-server>.ngrok.app>
2025-09-04 14:19:01.508090+0300  localhost neagent[870]: [com.apple.networkextension:] <NEPIRChecker: 0xd17025590>: -[NEPIRChecker start:responseQueue:completionHandler:] - completed registration with PIR for Group com.example.apple-samplecode.SimpleURLFilter<TEAM_ID> usecase com.example.apple-samplecode.SimpleURLFilter<TEAM_ID>.url.filtering
2025-09-04 14:19:05.573432+0300  localhost neagent[870]: [com.apple.networkextension:] <NEPIRChecker: 0xd17025590>: -[NEPIRChecker start:responseQueue:completionHandler:]_block_invoke - PIR status returned <ACTIVE : 6>

Am I missing something?

[ameshkov]

Updated to RC, but still even the basic example does not work.

The PIR service receives requests and they look legit:

2025-09-10T14:17:10+0300 info Hummingbird : [HummingbirdCore] Server started and listening on 0.0.0.0:8080
2025-09-10T14:17:20+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769130 hb.request.method=GET hb.request.path=/.well-known/private-token-issuer-directory [Hummingbird] Request
2025-09-10T14:17:20+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769131 hb.request.method=GET hb.request.path=/token-key-for-user-token [Hummingbird] Request
2025-09-10T14:17:21+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769132 hb.request.method=POST hb.request.path=/issue [Hummingbird] Request
2025-09-10T14:17:21+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769133 hb.request.method=POST hb.request.path=/issue [Hummingbird] Request
2025-09-10T14:17:21+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769135 hb.request.method=POST hb.request.path=/issue [Hummingbird] Request
2025-09-10T14:17:21+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769134 hb.request.method=POST hb.request.path=/issue [Hummingbird] Request
2025-09-10T14:17:21+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769136 hb.request.method=POST hb.request.path=/config [Hummingbird] Request
2025-09-10T14:17:21+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769136 [PIRService] Authenticating request
2025-09-10T14:17:21+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769136 [PIRService] Tier = tier1
2025-09-10T14:17:22+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769137 hb.request.method=POST hb.request.path=/key [Hummingbird] Request
2025-09-10T14:17:22+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769137 [PIRService] Authenticating request
2025-09-10T14:17:30+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769138 hb.request.method=POST hb.request.path=/queries [Hummingbird] Request
2025-09-10T14:17:30+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769138 [PIRService] Authenticating request
2025-09-10T14:17:32+0300 info Hummingbird : hb.request.id=3f7a58952d0db38d145071bf38769138 [PIRService] usecase=["com.example.apple-samplecode.SimpleURLFilter<TEAMID>.url.filtering"], duration=2090.036988258362ms

However, nothing is getting blocked and here's what's in the debug log:

2025-09-10 14:17:23.535874+0300  localhost nesessionmanager[223]: [com.apple.networkextension:] NESMURLFilterSession[SimpleURLFilter:16C63F3B-58C3-49BE-AD40-9B8D1343080A]: Entering state NESMURLFilterSessionStateRunning
2025-09-10 14:17:23.535906+0300  localhost nesessionmanager[223]: [com.apple.networkextension:] <NESMServer: 0x10329d610>: Request to install session: NESMURLFilterSession[SimpleURLFilter:16C63F3B-58C3-49BE-AD40-9B8D1343080A] (exclusive)
2025-09-10 14:17:23.535918+0300  localhost nesessionmanager[223]: [com.apple.networkextension:] Setting last stop reason to 0
2025-09-10 14:17:23.535929+0300  localhost nesessionmanager[223]: [com.apple.networkextension:] NESMURLFilterSession[SimpleURLFilter:16C63F3B-58C3-49BE-AD40-9B8D1343080A]: status changed to connected
2025-09-10 14:17:29.597905+0300  localhost nesessionmanager[223]: [com.apple.networkextension:] Got a new agent client connection from com.apple.WebKit.Networking(1663)
2025-09-10 14:17:29.597915+0300  localhost nesessionmanager[223]: [com.apple.networkextension:] Received a request for a new URL filter connection from client pid 1663
2025-09-10 14:17:29.598050+0300  localhost neagent[1659]: [com.apple.networkextension:] <NEURLFilterEngine: 0x70ec18d20>: -[NEURLFilterEngine fetchConnectionWithCompletionHandler:]_block_invoke
2025-09-10 14:17:29.598199+0300  localhost neagent[1659]: [com.apple.networkextension:] <NEURLFilterEngine: 0x70ec18d20>: -[NEURLFilterEngine acceptNewClientConnection:]
2025-09-10 14:17:30.280592+0300  localhost MobileSafari[835]: (libnetworkextension.dylib) [com.apple.networkextension:] ne_url_filter_request_xpc_connection: URL Filter falling back to Mach service com.apple.nesessionmanager
2025-09-10 14:17:30.280815+0300  localhost nesessionmanager[223]: [com.apple.networkextension:] Got a new agent client connection from MobileSafari(835)
2025-09-10 14:17:30.280838+0300  localhost nesessionmanager[223]: [com.apple.networkextension:] Received a request for a new URL filter connection from client pid 835
2025-09-10 14:17:30.280998+0300  localhost neagent[1659]: [com.apple.networkextension:] <NEURLFilterEngine: 0x70ec18d20>: -[NEURLFilterEngine fetchConnectionWithCompletionHandler:]_block_invoke
2025-09-10 14:17:30.281211+0300  localhost neagent[1659]: [com.apple.networkextension:] <NEURLFilterEngine: 0x70ec18d20>: -[NEURLFilterEngine acceptNewClientConnection:]
2025-09-10 14:17:30.535871+0300  localhost ciphermld[806]: (libsystem_networkextension.dylib) [com.apple.networkextension:] UUID cache hit for com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF
2025-09-10 14:17:33.494362+0300  localhost com.apple.Safari.SearchHelper[1670]: (libnetworkextension.dylib) [com.apple.networkextension:] ne_url_filter_request_xpc_connection: URL Filter falling back to Mach service com.apple.nesessionmanager

[karulont]

I think the string should be "URLCHECK".

I got this suggestion:

Try another way to capture the debug logging.
On your Mac host (attached to your iOS device), use console app to stream log.
In console app menu, there is an option to "Include Debug Messages".
Turning on debug logging, you should see Network Extension logs with the string "URLCHECK", this shows the URL filtering activities.
Please capture the streamed logs for com.apple.networkextension and provide to via feedback.

[ameshkov]

This way sounds easier to use than exporting sysdiagnose.

Anyways, I examined all network extension logs and the reason why the sample does not block anything is unclear to me.
If you have access to feedback reports, mine is FB20085075

[ameshkov]

Here's how the log looks like.

In order to trigger the check I modified SimpleURLFilter and added NEURLFilter.verdict(for:) call there.
I tried to check https://example2.com and https://example.com (the log below is for example2.com).

If I am not mistaken, it seems that prefilter returns "allowed" for those URLs even though it shouldn't.

Could it be that the bloom filter in the sample app is not valid?

Just in case, I am using this sample app: https://docs-assets.developer.apple.com/published/c9c981cf08eb/SimpleURLFilter.zip

The bloom filter there is this:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>bitVectorData</key>
    <data>
    KnFnz7/dUDyK51HqlhTlswav
    </data>
    <key>falsePositiveTolerance</key>
    <real>0.0001</real>
    <key>murmurSeed</key>
    <integer>3919904948</integer>
    <key>numberOfBits</key>
    <integer>144</integer>
    <key>numberOfBytes</key>
    <integer>18</integer>
    <key>numberOfHashes</key>
    <integer>10</integer>
    <key>numberOfItems</key>
    <integer>10</integer>
</dict>
</plist>

Log

debug	17:47:56.310520+0300	SimpleURLFilter	ne_url_filter_check: URLCHECK: CHECKING URL - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <<nil>> pid <0>)
debug	17:47:56.310512+0300	SimpleURLFilter	ne_url_filter_check: URLCHECK: CHECKING URL - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <<nil>> pid <0>)
debug	17:47:56.310720+0300	SimpleURLFilter	ne_url_filter_handle_request: URLCHECK: SENDING URL CHECK REQ - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.310941+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: HANDLING URL CHECK REQ - <mask.hash: 'wkJRri/BZ3e9HR8CqXDkmg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.310528+0300	SimpleURLFilter	ne_url_filter_check: URLCHECK: CHECKING URL - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <<nil>> pid <0>)
debug	17:47:56.310754+0300	SimpleURLFilter	ne_url_filter_handle_request: URLCHECK: SENDING URL CHECK REQ - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.310965+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: HANDLING URL CHECK REQ - <mask.hash: 'wkJRri/BZ3e9HR8CqXDkmg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311201+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'mixMYyaODEpwvZERIH7Ekg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311242+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'AS9bC9rf6wSFu9UvfID/Og=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311283+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: '7qo/SY52acXhUenWnxOsgw=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311316+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'IrG8En8iLvl+mla1NmPjfg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311356+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'YzYtf9xq6wMXYJGNEl7osQ=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311389+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'HyGHdPMYBAxYnYRMZ+XhmA=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311423+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: FINAL RESULT: PREFILTER ALLOWED - <mask.hash: 'wkJRri/BZ3e9HR8CqXDkmg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311511+0300	SimpleURLFilter	ne_url_filter_handle_request_block_invoke_2: URLCHECK: FINAL RESULT: FILTER ALLOWED - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.310744+0300	SimpleURLFilter	ne_url_filter_handle_request: URLCHECK: SENDING URL CHECK REQ - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.310954+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: HANDLING URL CHECK REQ - <mask.hash: 'wkJRri/BZ3e9HR8CqXDkmg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311189+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'mixMYyaODEpwvZERIH7Ekg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311230+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'AS9bC9rf6wSFu9UvfID/Og=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311266+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: '7qo/SY52acXhUenWnxOsgw=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311305+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'IrG8En8iLvl+mla1NmPjfg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311346+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'YzYtf9xq6wMXYJGNEl7osQ=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311378+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'HyGHdPMYBAxYnYRMZ+XhmA=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311412+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: FINAL RESULT: PREFILTER ALLOWED - <mask.hash: 'wkJRri/BZ3e9HR8CqXDkmg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311502+0300	SimpleURLFilter	ne_url_filter_handle_request_block_invoke_2: URLCHECK: FINAL RESULT: FILTER ALLOWED - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311177+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'mixMYyaODEpwvZERIH7Ekg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311214+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'AS9bC9rf6wSFu9UvfID/Og=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311255+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: '7qo/SY52acXhUenWnxOsgw=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311295+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'IrG8En8iLvl+mla1NmPjfg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311335+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'YzYtf9xq6wMXYJGNEl7osQ=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311368+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: PREFILTER SUBURL CHECK: ALLOWED - <mask.hash: 'HyGHdPMYBAxYnYRMZ+XhmA=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311402+0300	neagent	-[NEURLFilterEngine handleNewRequest:connection:filloutReply:completionHandler:]: URLCHECK: FINAL RESULT: PREFILTER ALLOWED - <mask.hash: 'wkJRri/BZ3e9HR8CqXDkmg=='> (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)
debug	17:47:56.311494+0300	SimpleURLFilter	ne_url_filter_handle_request_block_invoke_2: URLCHECK: FINAL RESULT: FILTER ALLOWED - '68 74 74 70 73 3A 2F 2F 65 78 61 6D 70 6C 65 32 2E 63 6F 6D 2F' (app bundleid <com.example.apple-samplecode.SimpleURLFilterTC3Q7MAJXF> pid <0>)