/* * This extends the NAT matching to be based on the cookies associated with * a session and found at the front of IKE packets. The cookies are always * in the same order (not reversed depending on packet flow direction as with * UDP/TCP port numbers). */