Seeing that the is a Flow Lookup entry in packet trac, is it possible that
the UDP connection already exists on the ASA? From the command line, you can do a "show conn all | include "
See if the connection entry exists. The flow would be allowed because of an existing connection allowed on the ASA.