Hello. I am analyzing TLS packets, in support of my company's effort to restrict all TLS sessions to use version 1.2.
I have been aware for some time that there is both a Record version, and a Handshake version, in a TLS packet. But today was the first time I saw two different versions seemingly associated with the Record. Here is what I'm seeing...
Can anyone explain how to interpret these two "Record versions"?
Thx, feenyman99