I made a rule in NAT with the same parameters as in Filter. But packet rate in NAT rule is almost not moving the total is also in thousands times less than in filter and in out interface in general. It seems that NAT counter is not count packets from established connections. Is it true?
I use 6.43.4 on CCR1009.
Natting is usually (tcp) connection oriented, while filtering is usually packet based. Since tcp connections consist of many packet exchanges, counter will grown with different rates.