The application saw exactly the traffic it always does. The copy was taken one layer down, inside the load balancer that decrypts it.