ipsec_encap
static int ipsec_encap(struct mbuf **mp, struct secasindex *saidx);
error = ipsec_encap(&m, &sav->sah->saidx);