Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

TLS Record has two versions

Hello. I am analyzing TLS packets, in support of my company's effort to restrict all TLS sessions to use version 1.2.

I have been aware for some time that there is both a Record version, and a Handshake version, in a TLS packet. But today was the first time I saw two different versions seemingly associated with the Record. Here is what I'm seeing...

image description

Can anyone explain how to interpret these two "Record versions"?

Thx, feenyman99