App didnt come up -
I could see the 3-way handshake however the push packet after that was failing. I had seen this for 2-3 apps along with F5 support. I could also see number of ARP queries after the handshake. I felt that the SSL handshake between LTM and the server used to fail. The moment I changed it to L4 VS, everything started working fine.
10:40:13.299685 802.1Q vlan4094 P0 198.147.192.8.37702 > 192.168.20.25.https: S 216133023:216133023(0) win 64512 (DF)
10:40:13.300183 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.37702: S 2271599220:2271599220(0) ack 216133024 win 4080 (DF)
10:40:13.376828 802.1Q vlan4094 P0 198.147.192.8.37702 > 192.168.20.25.https: . ack 1 win 65280 (DF)
10:40:13.379514 802.1Q vlan4094 P0 198.147.192.8.37702 > 192.168.20.25.https: P 1:71(70) ack 1 win 65280 (DF)
10:40:13.480337 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.37702: . ack 71 win 4150 (DF)
10:40:17.887658 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25
10:40:19.442921 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25
10:40:29.442969 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25
10:40:39.443503 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25
10:40:49.443311 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25
10:40:55.372253 802.1Q vlan4093 P0 192.168.16.6.36642 > 255.255.255.255.9030: udp 57 (DF) [ttl 1]
10:40:59.369788 802.1Q vlan4094 P0 198.147.192.8.48817 > 192.168.20.25.https: S 3991309693:3991309693(0) win 64512 (DF)
10:40:59.370284 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.48817: S 1609790644:1609790644(0) ack 3991309694 win 4140 (DF)
10:40:59.406888 802.1Q vlan4094 P0 198.147.192.8.48817 > 192.168.20.25.https: . ack 1 win 64512 (DF)
10:40:59.407621 802.1Q vlan4094 P0 198.147.192.8.48817 > 192.168.20.25.https: P 1:71(70) ack 1 win 64512 (DF)
10:40:59.442874 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25
10:40:59.506983 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.48817: . ack 71 win 4210 (DF)
10:41:09.442922 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25
10:41:35.434705 802.1Q vlan4094 P0 198.147.192.8.48817 > 192.168.20.25.https: F 71:71(0) ack 1 win 64512 (DF)
10:41:35.435451 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.48817: . ack 72 win 4210 (DF)
10:41:35.435460 802.1Q vlan4094 P0 192.168.20.25.https > 198.147.192.8.48817: F 1:1(0) ack 72 win 4210 (DF)
10:41:35.472299 802.1Q vlan4094 P0 198.147.192.8.48817 > 192.168.20.25.https: . ack 2 win 64512 (DF)
10:42:05.080630 802.1Q vlan4093 P0 arp reply 192.168.16.6 is-at 0:21:28:2e:ec:69
10:42:05.386762 802.1Q vlan4093 P0 192.168.16.6.36642 > 255.255.255.255.9030: udp 57 (DF) [ttl 1]
10:42:45.190837 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25
10:42:49.443179 802.1Q vlan4094 P0 arp who-has 192.168.20.25 (Broadcast) tell 192.168.20.25