Hi All,
The two protocols Record and Handshake protocol of SSL packet,
the length is represented in 2 ( 8 bits for Record ) and 3 ( 24 bits
for Handshake )bytes respectively. The whole packet length is going to
be given in Record protocol that includes the Mac and padded bytes
length which will be followed by Handshake protocol that gives only the
actual packet data size without the Mac and pad size. So the length in
the Handshake protocol is always less than Record protocol length.

Then why the number of bytes to specify the length is greater for
Handshake protocol? Any case/packet that contains greater length in
Handshake protocol than Record protocol?
Does anyone has any idea? Please let me know.