Blocking LLDP / Protocol 35020

I know I can turn off discovery - just wondering why I cant firewall it.

Also - why does this not catch the outgoing packet? Counter never increments yet I see it in the packet capture.

/ip firewall raw
add action=drop chain=output comment=“drop discovery out any2 exchange” dst-port=5678 out-interface=vlan2-Any2Exchange protocol=udp