in filter tls < tlf < tlog; extension cleanup