True if data looks like a uTP packet: 20-byte header, version nibble 1, known type nibble. A DHT/bencode datagram starts with 'd' (0x64 → version 4) and always fails this check. session_impl sniffs the same way.
'd'
session_impl