:len ends up being -13 because tp->t_maxopd = 64, optlen = 12, :and ipoptlen = 65 (because ipsec_hdrsiz_tcp(tp) = 65. : :But I don't know, how to handle this case correctly. A maxopd value of 64 seems really small. What's the link MTU as shown by ifconfig?