I think you will need to have a little look with wireshark, but perhaps not too much pulling them apart.
First question we need answered is if this is happening on a new connection or an existing one. Given it is in initHandshaker, it is probably a new connection, but renegotiation may also be happening on an existing connection.
Then it would be good to see exactly how many packets have been exchanged prior to this.
At this stage, this looks like clients sending bad negotiation packets, maybe not even TLS. So bad client is the suspect until proven otherwise.