1 | initial version |
To clarify:
You talk about SSL/TLS connections? You get a TLS Record with content type "Alert" (21)?
This "alert" is used in SSL/TLS for notifying to close the connection. So it's quit normal to see "Encrypted Alert" at the end of a SSL/TLS session. Normally when there is no more data to send, the sender sends this TLS Alert.