HIP SAs are break before make instead of make before break. It is therefore possible for packets to be dropped for the brief interval while the HIP SA Update is completing. This is noticeable if saturating the HIP connection with traffic (e.g. with iperf) while an update happens. There will be messages of the form:
Warning: SA not found for SPI