Filter NTP traffic by packet size?