# TLS Versions - Packetbeat 6.1.1

**URL:** <https://discuss.elastic.co/t/tls-versions-packetbeat-6-1-1/112972>\
**Category:** Beats\
**Created:** [December 22, 2017, 9:08am UTC](https://discuss.elastic.co/t/tls-versions-packetbeat-6-1-1/112972 "2017-12-22T09:08:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [December 22, 2017, 9:08am UTC](https://discuss.elastic.co/t/tls-versions-packetbeat-6-1-1/112972/1 "2017-12-22T09:08:42Z")

</div>

Hi,

I've recently started using packetbeat 6.1.1 to make use of the new TLS module.

It works really well, however I'm puzzled as to why the TLS versions are 3.x as opposed to the proper versioning (1.x).

I'm assuming the numbering is to follow up from SSL 3.0? So, TLS version 3.1 is essentially TLS 1.0, 3.3 is TLS 1.2?

"server\_hello": {  
"version": "3.3",

Would it not make more sense to just use the proper TLS version?

Thanks!  
James

---

<div class="post-metadata">

**Author:** ![adrisr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrisr/32/25423_2.png) [@adrisr](https://discuss.elastic.co/u/adrisr)\
**Post date:** [December 22, 2017, 10:02am UTC](https://discuss.elastic.co/t/tls-versions-packetbeat-6-1-1/112972/2 "2017-12-22T10:02:18Z")

</div>

Hi jamesspi,

The TLS module uses the internal versioning in the TLS protocol, which follows up from SSL 3.0, as you said.

We have an issue to fix this already:

> <https://github.com/elastic/beats/issues/5800>

Should be fixed by 6.1.2 / 6.2.0

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [December 22, 2017, 10:38am UTC](https://discuss.elastic.co/t/tls-versions-packetbeat-6-1-1/112972/3 "2017-12-22T10:38:08Z")

</div>

Fantastic, thanks @adrisr!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 12, 2018, 9:08am UTC](https://discuss.elastic.co/t/tls-versions-packetbeat-6-1-1/112972/4 "2018-01-12T09:08:42Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.