Peace,

On Tue, Aug 25, 2020, 3:14 PM Jon Lewis <jlewis@lewis.org> wrote:
When an application sends more data via UDP than can be fit in a single
packet, only the first packet has a UDP header [where the port info is
stored].  The rest of the fragments have no UDP header, which most things
will report as UDP src/dst port = 0.

Oh yes, if you don't reassemble fragments on your equipment then please please do not filter anything.

--
Töma