aa_dfa_match_be16
state = aa_dfa_match_be16(policy->dfa, state, (u16)af);
state = aa_dfa_match_be16(policy->dfa, state, (u16)type);
state = aa_dfa_match_be16(policy->dfa, state, (u16)protocol);