diff --git a/nfq/desync.c b/nfq/desync.c
index c36efc43..be1f0b75 100644
--- a/nfq/desync.c
+++ b/nfq/desync.c
@@ -152,6 +152,9 @@ static void TLSDebug(const uint8_t *tls,size_t sz)
 
 	DLOG("TLS record layer version : %s\n",TLSVersionStr(pntoh16(tls+1)));
 
+	size_t reclen=TLSRecordLen(tls);
+	if (reclen<sz) sz=reclen; // correct len if it has more data than the first tls record has
+
 	TLSDebugHandshake(tls+5,sz-5);
 }
 
diff --git a/tpws/tamper.c b/tpws/tamper.c
index 415cb231..79e162d5 100644
--- a/tpws/tamper.c
+++ b/tpws/tamper.c
@@ -84,6 +84,9 @@ static void TLSDebug(const uint8_t *tls,size_t sz)
 
 	VPRINT("TLS record layer version : %s\n",TLSVersionStr(pntoh16(tls+1)));
 
+	size_t reclen=TLSRecordLen(tls);
+	if (reclen<sz) sz=reclen; // correct len if it has more data than the first tls record has
+
 	TLSDebugHandshake(tls+5,sz-5);
 }