Standard debugging advice applies to figure out what's going on.
- Increase Logstash's logging verbosity. Maybe you're not using the configuration you think you're using?
- Use Wireshark to trace the network traffic.
- Use strace to pry into what the Logstash process is doing.