cipso: don't use IPCB() to locate the CIPSO IP option