1.) This is the output of tcpdump.pcap, obtained by running tcpdump for a few seconds on the command line:
13:15:14.464187 IP EDEMUMHAPRXY01.47916 > edemumkycapp002.edelcap.com.54322: Flags [S], seq 2382711238, win 29200, options [mss 1460,sackOK,TS val 271645500 ecr 0,nop,wscale 7], length 0
13:15:14.464489 IP edemumkycapp002.edelcap.com.54322 > EDEMUMHAPRXY01.47916: Flags [S.], seq 725860460, ack 2382711239, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159386333 ecr 271645500], length 0
13:15:14.464558 IP EDEMUMHAPRXY01.47916 > edemumkycapp002.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159386333], length 0
13:15:14.617848 IP EDEMUMHAPRXY01.33674 > edemumkycapp001.edelcap.com.54322: Flags [S], seq 1622632766, win 29200, options [mss 1460,sackOK,TS val 271645654 ecr 0,nop,wscale 7], length 0
13:15:14.618272 IP edemumkycapp001.edelcap.com.54322 > EDEMUMHAPRXY01.33674: Flags [S.], seq 3869667391, ack 1622632767, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159174990 ecr 271645654], length 0
13:15:14.618331 IP EDEMUMHAPRXY01.33674 > edemumkycapp001.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159174990], length 0
13:15:15.465550 IP EDEMUMHAPRXY01.47932 > edemumkycapp002.edelcap.com.54322: Flags [S], seq 2312715945, win 29200, options [mss 1460,sackOK,TS val 271646502 ecr 0,nop,wscale 7], length 0
13:15:15.465892 IP edemumkycapp002.edelcap.com.54322 > EDEMUMHAPRXY01.47932: Flags [S.], seq 952059582, ack 2312715946, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159386433 ecr 271646502], length 0
13:15:15.465966 IP EDEMUMHAPRXY01.47932 > edemumkycapp002.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159386433], length 0
13:15:15.618393 IP EDEMUMHAPRXY01.33690 > edemumkycapp001.edelcap.com.54322: Flags [S], seq 2754472082, win 29200, options [mss 1460,sackOK,TS val 271646654 ecr 0,nop,wscale 7], length 0
13:15:15.618861 IP edemumkycapp001.edelcap.com.54322 > EDEMUMHAPRXY01.33690: Flags [S.], seq 2608202623, ack 2754472083, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159175090 ecr 271646654], length 0
13:15:15.618922 IP EDEMUMHAPRXY01.33690 > edemumkycapp001.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159175090], length 0
13:15:15.863790 IP edemumkycapp002.edelcap.com.51965 > amltrackwizz.edelcap.com.54322: Flags [SEW], seq 777251238, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
13:15:15.863821 IP amltrackwizz.edelcap.com.54322 > edemumkycapp002.edelcap.com.51965: Flags [S.], seq 585903501, ack 777251239, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
13:15:15.864098 IP edemumkycapp002.edelcap.com.51965 > amltrackwizz.edelcap.com.54322: Flags [.], ack 1, win 256, length 0
13:15:15.864181 IP EDEMUMHAPRXY01.47940 > edemumkycapp002.edelcap.com.54322: Flags [S], seq 2830128245, win 29200, options [mss 1460,sackOK,TS val 271646900 ecr 0,nop,wscale 7], length 0
13:15:15.864318 IP edemumkycapp002.edelcap.com.51965 > amltrackwizz.edelcap.com.54322: Flags [P.], seq 1:179, ack 1, win 256, length 178
13:15:15.864332 IP amltrackwizz.edelcap.com.54322 > edemumkycapp002.edelcap.com.51965: Flags [.], ack 179, win 237, length 0
13:15:15.864392 IP edemumkycapp002.edelcap.com.54322 > EDEMUMHAPRXY01.47940: Flags [S.], seq 349886213, ack 2830128246, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159386473 ecr 271646900], length 0
13:15:15.864406 IP EDEMUMHAPRXY01.47940 > edemumkycapp002.edelcap.com.54322: Flags [.], ack 1, win 229, options [nop,nop,TS val 271646900 ecr 159386473], length 0
13:15:15.864436 IP EDEMUMHAPRXY01.47940 > edemumkycapp002.edelcap.com.54322: Flags [P.], seq 1:179, ack 1, win 229, options [nop,nop,TS val 271646900 ecr 159386473], length 178
13:15:15.866343 IP edemumkycapp002.edelcap.com.54322 > EDEMUMHAPRXY01.47940: Flags [P.], seq 1:26, ack 179, win 260, options [nop,nop,TS val 159386473 ecr 271646900], length 25
13:15:15.866361 IP EDEMUMHAPRXY01.47940 > edemumkycapp002.edelcap.com.54322: Flags [.], ack 26, win 229, options [nop,nop,TS val 271646902 ecr 159386473], length 0
13:15:15.866383 IP amltrackwizz.edelcap.com.54322 > edemumkycapp002.edelcap.com.51965: Flags [P.], seq 1:26, ack 179, win 237, length 25
13:15:15.866876 IP edemumkycapp002.edelcap.com.51965 > amltrackwizz.edelcap.com.54322: Flags [P.], seq 179:1068, ack 26, win 256, length 889
13:15:15.866922 IP EDEMUMHAPRXY01.47940 > edemumkycapp002.edelcap.com.54322: Flags [P.], seq 179:1068, ack 26, win 229, options [nop,nop,TS val 271646903 ecr 159386473], length 889
13:15:15.906495 IP amltrackwizz.edelcap.com.54322 > edemumkycapp002.edelcap.com.51965: Flags [.], ack 1068, win 251, length 0
13:15:15.933314 IP edemumkycapp002.edelcap.com.54322 > EDEMUMHAPRXY01.47940: Flags [.], ack 1068, win 256, options [nop,nop,TS val 159386480 ecr 271646903], length 0
13:15:16.467159 IP EDEMUMHAPRXY01.47950 > edemumkycapp002.edelcap.com.54322: Flags [S], seq 2386939161, win 29200, options [mss 1460,sackOK,TS val 271647503 ecr 0,nop,wscale 7], length 0
13:15:16.467498 IP edemumkycapp002.edelcap.com.54322 > EDEMUMHAPRXY01.47950: Flags [S.], seq 3727511510, ack 2386939162, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159386533 ecr 271647503], length 0
13:15:16.467568 IP EDEMUMHAPRXY01.47950 > edemumkycapp002.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159386533], length 0
13:15:16.620056 IP EDEMUMHAPRXY01.33708 > edemumkycapp001.edelcap.com.54322: Flags [S], seq 1811725508, win 29200, options [mss 1460,sackOK,TS val 271647656 ecr 0,nop,wscale 7], length 0
13:15:16.620477 IP edemumkycapp001.edelcap.com.54322 > EDEMUMHAPRXY01.33708: Flags [S.], seq 1717877823, ack 1811725509, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159175190 ecr 271647656], length 0
13:15:16.620578 IP EDEMUMHAPRXY01.33708 > edemumkycapp001.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159175190], length 0
13:15:17.468563 IP EDEMUMHAPRXY01.47966 > edemumkycapp002.edelcap.com.54322: Flags [S], seq 2218347830, win 29200, options [mss 1460,sackOK,TS val 271648505 ecr 0,nop,wscale 7], length 0
13:15:17.469028 IP edemumkycapp002.edelcap.com.54322 > EDEMUMHAPRXY01.47966: Flags [S.], seq 2440975635, ack 2218347831, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159386633 ecr 271648505], length 0
13:15:17.469108 IP EDEMUMHAPRXY01.47966 > edemumkycapp002.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159386633], length 0
13:15:17.621466 IP EDEMUMHAPRXY01.33724 > edemumkycapp001.edelcap.com.54322: Flags [S], seq 4091299100, win 29200, options [mss 1460,sackOK,TS val 271648657 ecr 0,nop,wscale 7], length 0
13:15:17.621869 IP edemumkycapp001.edelcap.com.54322 > EDEMUMHAPRXY01.33724: Flags [S.], seq 2194960544, ack 4091299101, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159175291 ecr 271648657], length 0
13:15:17.621930 IP EDEMUMHAPRXY01.33724 > edemumkycapp001.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159175291], length 0
13:15:18.469689 IP EDEMUMHAPRXY01.47982 > edemumkycapp002.edelcap.com.54322: Flags [S], seq 35080592, win 29200, options [mss 1460,sackOK,TS val 271649506 ecr 0,nop,wscale 7], length 0
13:15:18.470089 IP edemumkycapp002.edelcap.com.54322 > EDEMUMHAPRXY01.47982: Flags [S.], seq 326593467, ack 35080593, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159386733 ecr 271649506], length 0
13:15:18.470226 IP EDEMUMHAPRXY01.47982 > edemumkycapp002.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159386733], length 0
13:15:18.622522 IP EDEMUMHAPRXY01.33740 > edemumkycapp001.edelcap.com.54322: Flags [S], seq 607092125, win 29200, options [mss 1460,sackOK,TS val 271649659 ecr 0,nop,wscale 7], length 0
13:15:18.622984 IP edemumkycapp001.edelcap.com.54322 > EDEMUMHAPRXY01.33740: Flags [S.], seq 1774064416, ack 607092126, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159175391 ecr 271649659], length 0
13:15:18.623049 IP EDEMUMHAPRXY01.33740 > edemumkycapp001.edelcap.com.54322: Flags [R.], seq 1, ack 1, win 229, options [nop,nop,TS val 0 ecr 159175391], length 0
13:15:19.149184 IP edemumkycapp002.edelcap.com.51966 > amltrackwizz.edelcap.com.54322: Flags [SEW], seq 1825140554, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
13:15:19.149207 IP amltrackwizz.edelcap.com.54322 > edemumkycapp002.edelcap.com.51966: Flags [S.], seq 1529044179, ack 1825140555, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
13:15:19.149386 IP edemumkycapp002.edelcap.com.51966 > amltrackwizz.edelcap.com.54322: Flags [.], ack 1, win 256, length 0
13:15:19.149493 IP EDEMUMHAPRXY01.33750 > edemumkycapp001.edelcap.com.54322: Flags [S], seq 2525594034, win 29200, options [mss 1460,sackOK,TS val 271650186 ecr 0,nop,wscale 7], length 0
13:15:19.149535 IP edemumkycapp002.edelcap.com.51966 > amltrackwizz.edelcap.com.54322: Flags [P.], seq 1:180, ack 1, win 256, length 179
13:15:19.149546 IP amltrackwizz.edelcap.com.54322 > edemumkycapp002.edelcap.com.51966: Flags [.], ack 180, win 237, length 0
13:15:19.149951 IP edemumkycapp001.edelcap.com.54322 > EDEMUMHAPRXY01.33750: Flags [S.], seq 2984229369, ack 2525594035, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 159175443 ecr 271650186], length 0
13:15:19.149972 IP EDEMUMHAPRXY01.33750 > edemumkycapp001.edelcap.com.54322: Flags [.], ack 1, win 229, options [nop,nop,TS val 271650186 ecr 159175443], length 0
13:15:19.149992 IP EDEMUMHAPRXY01.33750 > edemumkycapp001.edelcap.com.54322: Flags [P.], seq 1:180, ack 1, win 229, options [nop,nop,TS val 271650186 ecr 159175443], length 179
13:15:19.150301 IP edemumkycapp001.edelcap.com.54322 > EDEMUMHAPRXY01.33750: Flags [.], ack 180, win 514, options [nop,nop,TS val 159175443 ecr 271650186], length 0
13:15:19.151519 IP edemumkycapp001.edelcap.com.54322 > EDEMUMHAPRXY01.33750: Flags [P.], seq 1:26, ack 180, win 514, options [nop,nop,TS val 159175444 ecr 271650186], length 25
13:15:19.151529 IP EDEMUMHAPRXY01.33750 > edemumkycapp001.edelcap.com.54322: Flags [.], ack 26, win 229, options [nop,nop,TS val 271650188 ecr 159175444], length 0
2.)This is the output of ss -lpten |fgrep 54322:
[root@EDEMUMHAPRXY01 safeliro]# ss -lpten | fgrep 54322
LISTEN 0 128 10.250.2.127:54322 : users:((“haproxy”,pid=4936,fd=7)) ino:46940573 sk:ffff8800ba4cae80 <->
and this is the output of haproxy -vv 
[root@EDEMUMHAPRXY01 safeliro]# haproxy -vv
HA-Proxy version 1.5.18 2016/05/10
Copyright 2000-2016 Willy Tarreau willy@haproxy.org
Build options :
TARGET = linux2628
CPU = generic
CC = gcc
CFLAGS = -O2 -g -fno-strict-aliasing -DTCP_USER_TIMEOUT=18
OPTIONS = USE_LINUX_TPROXY=1 USE_ZLIB=1 USE_REGPARM=1 USE_OPENSSL=1 USE_PCRE=1
Default settings :
maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200
Encrypted password support via crypt(3): yes
Built with zlib version : 1.2.7
Compression algorithms supported : identity, deflate, gzip
Built with OpenSSL version : OpenSSL 1.0.1e-fips 11 Feb 2013
Running on OpenSSL version : OpenSSL 1.0.1e-fips 11 Feb 2013
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
Built with PCRE version : 8.32 2012-11-30
PCRE library supports JIT : no (USE_PCRE_JIT not set)
Built with transparent proxy support using: IP_TRANSPARENT IPV6_TRANSPARENT IP_FREEBIND
Available polling systems :
epoll : pref=300, test result OK
poll : pref=200, test result OK
select : pref=150, test result OK
Total: 3 (3 usable), will use epoll.
[root@EDEMUMHAPRXY01 safeliro]#
Please let us know if you require any other information, Lukas.