In message <20030822225624.BC6F297@coconut.itojun.org>Jun-ichiro itojun Hagino writes >> Comments? > > i don't think such complexity is not needed. you just need to cleanup > fast-ipsec m_aux on the call to if_output, that's all you need to do. Other users of the packet-tag API disagree.