I have a PfSense box as a UTM, running snort among other things. I started noticing that when MacBooks and iPhones/iPods connect to my network, the snort log gets flooded with this message:
(ssp_ssl) Invalid Client HELLO after Server HELLO Detected
It seems like this must be in the network stack somewhere, as it happens regardless of which application is using the SSL connection.
Does anyone know why this is, or whether there is any reason to be concerned?