GRSmith wrote:What triggers that in both cases is the Client Hello packet from the camera. The attachment shows a side-by-side comparison of that Client Hello packet for TLS(587) and SSL(465). As you can see, they are identical.
Could you post an expanded version of the client random, and all the suites?
Also, why is the camera using the heartbeat extension? Does it have heartbleed?