connection-mark packet-mark

Greetings,

Can someone explain what does connection-mark packet-mark do or the differnce or how are they used. I`ve seen it in the manual but still I need more.

And also when you do ip firewall mange forward does it mean that the rule is applied just before the packet gets out of the interface as compared to prerouting;

PREROUTING - mangle - FORWARD - OUTPUT
PREROUTING - FORWARD - mangle - OUTPUT

Connection mark marks all packets that belong to a particular connection.
Packet mark marks only the packets that are matched by the rule that marks them with packet mark.


Regarding your second question, see this page:
http://www.mikrotik.com/docs/ros/2.9/ip/flow