[jggimi]

Perhaps your test is flawed, or perhaps the rule's "1/2" value does not take into account the moving average calculation for max-src-conn-rate. The example in the Stateful Tracking Options section of the pf.conf(5) man page uses "100/10".