Receive Ip packets to user space which have to be protected by IPsec

Hi All 

Are there method to get IP packet With tunneled ip address( basically
subscriber Ip) 

which have to be protected with Ipsec , where there is no

route added to the tunneled IP address , but the outer 

Ip address have  routes added.

 

If there is no route added the packet will be dropped at the routing 

 phase itself and may not reach the Interface, so that it can be
captured 

 using pf_packet.

 

Any guidance will be appreciated.

 

Thanks and Regards

Naveen