> >	no, i objected of passing struct in6pcb * as the argument, i suggested
> >	struct socket * as explicit argument.  why did you commit it ignoring
> >	my comment?  i'll change them to pass struct socket *.
> And I replied that such a change would need a consensus with Sam
> Leffer. To do what you want we would also have to change fast-ipsec to
> accept a struct socket* rather than the struct inpcb* it is passed
> now.

	at this point fast-ipsec supports IPv4 only, so you can
		if (so->so_proto->pr_domain->dom_family == AF_INET)
			inp = (struct inpcb *)so->so_pcb;
		else
			inp = NULL;
	then pass inp to fast-ipsec (then no change to sys/netipsec).

itojun