tcpdump output to troubleshoot logstash issue

tcpdump_output

[root@sdev-4 chainsaw-bundle]# sudo tcpdump -nni any 'port 12555'
tcpdump: WARNING: Promiscuous mode not supported on the "any" device
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
17:46:11.338098 IP 127.0.0.1.39946 > 127.0.0.1.12555: P 2746833910:2746834251(341) ack 2753601842 win 257 <nop,nop,timestamp 1503592234 1501911360>
17:46:11.338465 IP 127.0.0.1.12555 > 127.0.0.1.39946: R 2753601842:2753601842(0) win 0
17:46:41.346222 IP 127.0.0.1.43726 > 127.0.0.1.12555: S 442773549:442773549(0) win 32792 <mss 16396,sackOK,timestamp 1503622244 0,nop,wscale 7>
17:46:41.346268 IP 127.0.0.1.12555 > 127.0.0.1.43726: R 0:0(0) ack 442773550 win 0
17:47:11.353072 IP 127.0.0.1.43729 > 127.0.0.1.12555: S 465865732:465865732(0) win 32792 <mss 16396,sackOK,timestamp 1503652250 0,nop,wscale 7>
17:47:11.353121 IP 127.0.0.1.12555 > 127.0.0.1.43729: R 0:0(0) ack 465865733 win 0
17:47:19.758548 IP 127.0.0.1.43740 > 127.0.0.1.12555: S 477735430:477735430(0) win 32792 <mss 16396,sackOK,timestamp 1503660656 0,nop,wscale 7>
17:47:19.758599 IP 127.0.0.1.12555 > 127.0.0.1.43740: R 0:0(0) ack 477735431 win 0
17:47:49.781074 IP 127.0.0.1.43749 > 127.0.0.1.12555: S 514221956:514221956(0) win 32792 <mss 16396,sackOK,timestamp 1503690679 0,nop,wscale 7>
17:47:49.781125 IP 127.0.0.1.12555 > 127.0.0.1.43749: R 0:0(0) ack 514221957 win 0
17:48:19.787576 IP 127.0.0.1.43766 > 127.0.0.1.12555: S 538429653:538429653(0) win 32792 <mss 16396,sackOK,timestamp 1503720685 0,nop,wscale 7>
17:48:19.787609 IP 127.0.0.1.12555 > 127.0.0.1.43766: R 0:0(0) ack 538429654 win 0