ipsec6_checkpolicy
struct secpolicy *ipsec6_checkpolicy(const struct mbuf *,
sp = ipsec6_checkpolicy(m, inp, &error, !forwarding);