Detecting TLS 1.0 Connections

Hello,

We have multiple 11.2.0.4 RAC clusters that we have configured to accept both TLS 1.0 and TLS 1.2 communications (SSL_VERSION=1.0 or 1.2 in the DB home sqlnet.ora).  We have a requirement to disable all TLS 1.0 communication and only use TLS 1.2.  Besides enabling tracing on the DB servers, is there a way to tell which incoming connections are using TLS 1.0?  We need to be able to determine this without any interruptions to the applications.

Thanks,

Susan