code: func (h *Handle) XfrmStateGet(state *XfrmState) (*XfrmState, error) {
  	return h.xfrmStateGetOrDelete(state, nl.XFRM_MSG_GETSA)
  }
docs: // XfrmStateGet gets the xfrm state described by the ID, if found.
  // Equivalent to: `ip xfrm state get ID [ mark MARK [ mask MASK ] ]`.
  // Only the fields which constitue the SA ID must be filled in:
  // ID := [ src ADDR ] [ dst ADDR ] [ proto XFRM-PROTO ] [ spi SPI ]
  // mark is optional