First time here? Check out the FAQ!

Hi there! Please sign in help

tags users badges

Ask Your Question

Revision history [back]

click to hide/show revision

1

initial version

answered 2019-10-16 18:37:54 +0000

flag of United Kingdom of Great Britain and Northern Ireland

23835 ●4 ●973 ●227 https://www.wireshark.org

Yep, looks like TLS session resumption. Check the Client Hello record for a session ticket.