Filter NTP traffic by packet size?

Most of what I've seen are reset configs on network gear, standalone devices (printers), and the occasional win 98 box with network addons.
We put blocks in place for ntp, SNMP for a short time to get things under control. Chargen was so small it was easier to just alert folks directly.