ESP (Encapsulating Security Payload) is the part of IPsec that actually encrypts the data. It encrypts everything beyond the IP headers, including the transport headers of TCP and UDP.
