I have two Client Hello messages from the same client to different servers, my client supports TLS 1.2 and TLS 1.3 as seen in the client hello supported versions.
In the first message the client chooses record layer version TLS 1.3.
While in the second message the client chooses record layer version TLS 1.2. (the client only sent hello and received alert)
Did the client really choose the version? If so, how the client decided the version if he hasn't received the Server Hello message yet.
Or does Wireshark set the version according to what he saw in the server hello?
How can this be explained?