RE: Receive Ip packets to user space which have to be protected by IPsec

Hi All 
Are there method to get IP packet With tunneled ip address( basically subscriber Ip) 
which have to be protected with Ipsec , where there is no
route added to the tunneled IP address , but the outer 
Ip address have  routes added.

If there is no route added the packet will be dropped at the routing 
 phase itself and may not reach the Interface, so that it can be captured 
 using pf_packet.

Any guidance will be appreciated.

Thanks and Regards
Naveen