This patch adds filtering support for the so-far missing protocols 'ah',
'esp' and 'udplite'.