Is it possible to capture or inspect UDP traffic using iOS content filter APIs (e.g., NEFilterDataProvider)? If not, what are the current technical or policy limitations that prevent UDP inspection via these frameworks?
Any insights or suggestions on these topics would be highly appreciated.
Is it possible to capture or inspect UDP traffic using iOS content filter APIs … ?
Yes.
The biggest challenge here relates to framing. The filter APIs, things like the NEFilterDataVerdict.init(passBytes:peekBytes:) initialised, work in terms of bytes, which isn’t ideal when dealing with UDP, where sometimes you really need to know about the datagram boundaries.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"