Comment by BoppreH

Isn't the 440 figure disingenuous? Surely you must count UDP/TCP header size, which would bring the value closer to 21/461 ~= 22.

Still an interesting discovery. DDoS amplification is a security risk few people consider when developing applications.