NATd traffic from internet not being load balanced

Here is the output. 10.244.250.29 is the virtual server. I even tried again adding the 'p' flag hoping it would show both sides, but nothing.

[root@SJ505DMZF51:Active:In Sync] config  tcpdump -ni 0.0 port 80 and host 70.215.138.162 and not host 10.244.252.2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes
15:28:42.901772 IP 70.215.138.162.eklogin > 10.244.250.29.http: S 875055479:875055479(0) win 55520 
15:28:42.901816 IP 10.244.250.29.http > 70.215.138.162.eklogin: S 1034731441:1034731441(0) ack 875055480 win 4164 
15:28:43.894852 IP 70.215.138.162.eklogin > 10.244.250.29.http: S 875055479:875055479(0) win 55520 
15:28:44.219908 IP 70.215.138.162.prp > 10.244.250.29.http: S 1911881537:1911881537(0) win 55520 
15:28:44.219948 IP 10.244.250.29.http > 70.215.138.162.prp: S 2060876685:2060876685(0) ack 1911881538 win 4164 
15:28:45.214853 IP 70.215.138.162.prp > 10.244.250.29.http: S 1911881537:1911881537(0) win 55520 
15:28:45.898836 IP 70.215.138.162.eklogin > 10.244.250.29.http: S 875055479:875055479(0) win 55520 
15:28:45.901722 IP 10.244.250.29.http > 70.215.138.162.eklogin: S 1034731441:1034731441(0) ack 875055480 win 4164 
15:28:47.219429 IP 10.244.250.29.http > 70.215.138.162.prp: S 2060876685:2060876685(0) ack 1911881538 win 4164 
15:28:47.219904 IP 70.215.138.162.prp > 10.244.250.29.http: S 1911881537:1911881537(0) win 55520 
15:28:49.906804 IP 70.215.138.162.eklogin > 10.244.250.29.http: S 875055479:875055479(0) win 55520 
15:28:51.226945 IP 70.215.138.162.prp > 10.244.250.29.http: S 1911881537:1911881537(0) win 55520 
15:28:51.901535 IP 10.244.250.29.http > 70.215.138.162.eklogin: S 1034731441:1034731441(0) ack 875055480 win 4164 
15:28:53.219464 IP 10.244.250.29.http > 70.215.138.162.prp: S 2060876685:2060876685(0) ack 1911881538 win 4164 
15:28:57.914814 IP 70.215.138.162.eklogin > 10.244.250.29.http: S 875055479:875055479(0) win 55520 
15:28:59.242889 IP 70.215.138.162.prp > 10.244.250.29.http: S 1911881537:1911881537(0) win 55520 
15:29:03.901803 IP 10.244.250.29.http > 70.215.138.162.eklogin: S 1034731441:1034731441(0) ack 875055480 win 4164 
15:29:05.219540 IP 10.244.250.29.http > 70.215.138.162.prp: S 2060876685:2060876685(0) ack 1911881538 win 4164 
15:29:13.947377 IP 70.215.138.162.eklogin > 10.244.250.29.http: S 875055479:875055479(0) win 55520 
15:29:15.291316 IP 70.215.138.162.prp > 10.244.250.29.http: S 1911881537:1911881537(0) win 55520 
^C
20 packets captured
20 packets received by filter
0 packets dropped by kernel
[root@SJ505DMZF51:Active:In Sync] config  tcpdump -nnnpi 0.0 port 80 and host 70.215.138.162 and not host 10.244.252.2
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on 0.0, link-type EN10MB (Ethernet), capture size 96 bytes
15:29:25.972565 IP 70.215.138.162.4248 > 10.244.250.29.80: S 1490764085:1490764085(0) win 55520 
15:29:25.972608 IP 10.244.250.29.80 > 70.215.138.162.4248: S 3443494879:3443494879(0) ack 1490764086 win 4164 
15:29:26.967711 IP 70.215.138.162.4248 > 10.244.250.29.80: S 1490764085:1490764085(0) win 55520 
15:29:28.971680 IP 70.215.138.162.4248 > 10.244.250.29.80: S 1490764085:1490764085(0) win 55520 
15:29:28.972652 IP 10.244.250.29.80 > 70.215.138.162.4248: S 3443494879:3443494879(0) ack 1490764086 win 4164 
15:29:32.979650 IP 70.215.138.162.4248 > 10.244.250.29.80: S 1490764085:1490764085(0) win 55520 
15:29:34.972676 IP 10.244.250.29.80 > 70.215.138.162.4248: S 3443494879:3443494879(0) ack 1490764086 win 4164 
15:29:41.003740 IP 70.215.138.162.4248 > 10.244.250.29.80: S 1490764085:1490764085(0) win 55520 
15:29:46.972504 IP 10.244.250.29.80 > 70.215.138.162.4248: S 3443494879:3443494879(0) ack 1490764086 win 4164 
15:29:57.037604 IP 70.215.138.162.4248 > 10.244.250.29.80: S 1490764085:1490764085(0) win 55520 
^C
10 packets captured
10 packets received by filter
0 packets dropped by kernel
[root@SJ505DMZF51:Active:In Sync] config