>>>> Comments?
>>>	i don't think such complexity is not needed.  you just need to cleanup
>>>	fast-ipsec m_aux on the call to if_output, that's all you need to do.
>> Other users of the packet-tag API disagree.
>
> 	who are they?

He's pimping for me.  In FreeBSD tags are used for more than just data that 
expire once an mbuf chain hits an interface.  Think of this data as an 
extension of m_pkthdr.  What's been presented is a (hopefuly) simple 
compromise that allows us to better cooperate going forward.

	Sam