In winbox, I've opened up the connections tab of the ip firewall and filtered on a particular src address and asked for the detail view.

There, I can see that a particular connection's timeout counted down past 0 and then started counting back *up* again.

What does this mean?

While we're at it, what does "assured" mean and how does it get into that state?

And what's the difference between the UDP timeout and UDP stream timeout?

There, I can see that a particular connection's timeout counted down past 0 and then started counting back *up* again.

I can also confirm this in latest routeros version (5.5). I'm fairly new to routeros but this doesn't seem normal. is there anything that we're missing?