Iptables / What is the difference between connmark and mark?

Question

While adding iptables rules, I couldn't understand what is the difference between connmark and mark? If anyone explains it with detailed explanations, I will be appreciated.

Solution

MARK associates "marks" with packets. CONNMARK associates "marks" with connections. The second one is useful because you can mark all the packets of a connection or related to a connection with the same mark (for example, FTP). Another usefull use of CONNMARK is that you can mark packets using the criteria that only matches with the first packet.