Luis, Please be specific, if your doing a tcpdump on eth0 for port 2095 do you see data?
This is needed to see the flows. To get the response times, the eth1 port is typically used to calculate that, and you need to see two-way responses there as well.
So I would show a little of what you see on each port if possible. be mindful that public IPS might be visible on any display of eth1 mirrored traffic.