Do not ask on multiple topic, the solution: http://forum.mikrotik.com/t/false-active-sessions/163578/4