egress_accept
if (egress_accept(&tcph) || egress_close_remote(&tcph))
if (egress_accept(&tcph) || egress_close_local(&tcph))