answered 2019-10-16 18:37:54 +0000
Yep, looks like TLS session resumption. Check the Client Hello record for a session ticket.
