The buffer size is limited to 65536 connections. If this limit is reached the firewall stops learning and the rule set based on the learned entries can be created.
If the firewall learning mode runs again, already covered connections won't be learned again.