Fix the ip header offset counting in vnet/ipsec