Untracked are connection that are not steered by Connection Tracking wich looks like a "mother chicken", if those connection are known to ther and were the have to go.
When a connection is stray and not know it will not pass her beak (control) and be removed.
Untracked traffic is traffic that is marked that is from a other chicken and should be not touched by connection tracking. This marking can only be done inside router.
Two RB760iGS (hEX S) in series. One does PPPoE/IKEv2 and the other does the rest of the tasks.
Running: RouterOS 6.46Beta / Winbox 3.19
/ MikroTik APP 1.2.6
Having an Android device, use https://github.com/M66B/NetGuard/releases
(no root required)