I am implementing a server which implements TCP/TLS communication. According to Codec 8 specification the preamble is composed by a short (two bytes) indicationg the length of the IMEI, followed by the IMEI itself.
I noted the swap of first two bytes containing the IMEI length in case of encryption enabled/disabled. The following pictures report the received buffer in the two situations.
Encryption NOT enabled

Encryption enabled

Is this a known issue? Is this related to endianess of the short indicating the IMEI length?