Cookie & PS_TOKEN movements during login and failover via load balancer
I'm trying to troubleshoot load balancing and failover for a Citrix Netscaler load balancer in front of two WebLogic 10.3.6 single-domain PIA's. I've enabled extended logging in the PIA's, which generates PIA_access.log, and I'm also using the "Live HTTP Headers" Firefox plugin. Thus, I can see cookies on both sides, and PS_TOKEN on the browser.
I understand that once the session cookie is generated, it's the browser's job to hang onto it and send it when required. Similarly, PS authentication creates the PS_TOKEN value, which is also kept by the browser. However, can anyone give me a step by step list of the exact origins and movements of these during a PeopleSoft login and also during a failover from one PIA to the other?