> Does this same change need to be made to netipsec/key.c? no, i think. netipsec code doesn't have sptailq and seems to ignore sadb_x_policy_id for per-pcb policies. YAMAMOTO Takashi