ipsec4_getpolicy
sp = ipsec4_getpolicy(m, inp, ip1, IPSEC_DIR_OUTBOUND, needport);
sp = ipsec4_getpolicy(m, inp, ip1, IPSEC_DIR_INBOUND, 0);