tunneling: Access correct IP header when processing ECN.