Packet counters for mark connection and mark packet

RouterOS Beginner Basics
1

Hi,
For my QOS configuration I use mark connection and then mark packet(using connection mark).
When I sent 5 icmp echo requests it shows 5 packets for mark connection and 10 packets for mark packets. Do you have any ideas?

/ip firewall mangle
add action=mark-connection chain=forward comment=Class8-CONNECTION-MARK new-connection-mark=all-con-mark out-interface-list=VPN passthrough=yes src-address-list=LAN
add action=mark-packet chain=forward comment=Class8-ALL connection-mark=all-con-mark new-packet-mark=all-packet-mark passthrough=no
sample.jpg

2

5 pings = 10 packets (5 leaving + 5 returning)

3

mark packet делается на основе mark connection(all-con-mark), в mark connection только 5 пакетов по статистике, откуда в mark packet появились еще 5?

4
  1. Connection is marked on the first packet from LAN to VPN: 1st counter +1
  2. The same packet is marked with packet mark by second rule (you have passthrough=yes on the first rule): 2nd counter +1
  3. Returning packet is marked with packet mark (as it belongs to already marked connection): 2nd counter +1
  1. На первом пакете помечается соединение: 1 счетчик +1
  2. Этот же пакет помечается вторым правилом: 2 счетчик +1
  3. Обратный пакет помечается вторым правилом: 2 счетчик +1