ipsec_local_check
if (ipsec_local_check(*mp, *offp, nxt, af) != 0) {
int ipsec_local_check(struct mbuf *, int, int, int);