We found the probably best way how to schape clients after long searching and we think the right metod is using Burst.
I think this metod was originaly not for the limitation, but in oposite to give "more" than normaly. We use it this way:
An client should have connection speed 12/5Mbit, but in agregation 1:10. So we want that he will pull all the time at full speed. So we use his real max speed as "Burst limit", and this will be the max speed. Than we set another long time limit as "max limit" , and this will be the speed when using long lasting downloading/uploading. The rest is to set decision when it is too much and when it is too long.
WRONG suggestion: So in my case, if an client will download more than 1500kbit for more than 1000s he will be limited to 2mbit, or by uploading more than 400k for more than 1000s limited to 512kbit upload.
EDIT: If the calculated average rate over the time period will be biger than the treshold 1500kbit, the client will be limited to 2Mbit.
It works very well, just the timer is not so accurate, we dont understand the time limit right. The router starts to limitate the user sooner.... why ? May be someone from Mikrotik will tell.
PS: If you like the post please give a carma