acl-plugin: use ip.save_rewrite_length to calculate IP header offset on L3 egress...