ipsec6_getpolicy
sp = ipsec6_getpolicy(m, inp, IPSEC_DIR_OUTBOUND, needport);
sp = ipsec6_getpolicy(m, inp, IPSEC_DIR_INBOUND, 0);