VPP-388 Improve IP header lookup in ipsec_output