ipsecif4_encap_func
ret = ipsecif4_encap_func(m, &ip, var);
int ipsecif4_encap_func(struct mbuf *, struct ip *, struct ipsec_variant *);