tls: check SSL3/TLS version per record

Set event if SSL3/TLS record isn't within the acceptable range.