ipsec_chkreplay
int ipsec_chkreplay(u_int32_t, const struct secasvar *);
if (sav->replay && !ipsec_chkreplay(ntohl(ah->ah_seq), sav)) {
if (esph && sav->replay && !ipsec_chkreplay(ntohl(esp->esp_seq), sav)) {