tcpdump - bad capture on BigIP or insane client?

have you checked the ltm logs for syncookie activation ? And have you checked the device before the F5 if they are seeing the packets which client is sending .

also in the capture you can try seraching with the sequence number tcp.seq == 23

Please apply more granular tcpdump filter if possible or you can try on all the vlans may be some routing issue.

Thanks