DNS_PORT
if (!(udp = parse_udphdr(&c)) || udp->dest != __bpf_htons(DNS_PORT))
if (ntohs(udp->dest) != DNS_PORT)