You might try capturing the HTTP communication from the client using a browser plugin like HttpFox for FF or Fiddler for IE. To capture all the traffic you could use tcpdump on LTM and/or Wireshark on the client and/or server. You could compare the successful session of a client connecting directly to the server with the client connecting via LTM. If you want help capturing or interpreting the traces, you could open a case with F5 Support.
There are some related solutions on F5's support site:
SOL411: Overview of packet tracing with the tcpdump utility (
Click here)
SOL6546: Recommended methods and limitations for running tcpdump on a BIG-IP version 9.x system (
Click here)
Aaron
Nimbostratus
