diff --git a/src/sniffer.c b/src/sniffer.c
index 1299c2ad0a..758e7be74d 100644
--- a/src/sniffer.c
+++ b/src/sniffer.c
@@ -5006,6 +5006,7 @@ static const byte* DecryptMessage(WOLFSSL* ssl, const byte* input, word32 sz,
         return NULL;
     }
 
+    ssl->curSize = sz;
     ssl->keys.encryptSz = sz;
     if (ssl->options.tls1_1 && ssl->specs.cipher_type == block) {
         output += ssl->specs.block_size; /* go past TLSv1.1 IV */