diff --git a/src/security/tls_session.cpp b/src/security/tls_session.cpp
index d0a9189ccd4a8b6f744e531a298a63c475c84c4f..e1e7bd467f0b9003c9faa4ad22f1e96196c4fb0d 100644
--- a/src/security/tls_session.cpp
+++ b/src/security/tls_session.cpp
@@ -384,7 +384,7 @@ void
 TlsSession::TlsSessionImpl::dump_io_stats() const
 {
     if (params_.logger)
-        params_.logger->debug("[TLS] RxRawPkt={:d} ({:d} bytes) - TxRawPkt={:d} ({:d} bytes)",
+        params_.logger->debug("[TLS] RxRawPkt={:d} ({:d} byte(s)) - TxRawPkt={:d} ({:d} byte(s))",
              stRxRawPacketCnt_.load(),
              stRxRawBytesCnt_.load(),
              stTxRawPacketCnt_.load(),
@@ -880,7 +880,7 @@ TlsSession::TlsSessionImpl::send(const ValueType* tx_data, std::size_t tx_size,
              * We will just try again later, although this should never happen.
              */
             if (params_.logger)
-                params_.logger->error("[TLS] Send failed (only {} bytes sent): {}", total_written, gnutls_strerror(nwritten));
+                params_.logger->error("[TLS] Send failed ({} byte(s) sent): {}", total_written, gnutls_strerror(nwritten));
             ec = std::error_code(nwritten, std::system_category());
             return 0;
         }
@@ -1350,7 +1350,7 @@ TlsSession::TlsSessionImpl::pathMtuHeartbeat()
     if (transport_ and transport_->localAddr().isIpv4() and transport_->remoteAddr().isIpv6()) {
         mtuOffset = ASYMETRIC_TRANSPORT_MTU_OFFSET;
         if (params_.logger)
-            params_.logger->w("[TLS] Local/remote IP protocol version not alike, use an MTU offset of {} bytes to compensate", ASYMETRIC_TRANSPORT_MTU_OFFSET);
+            params_.logger->w("[TLS] Local/remote IP protocol version not alike, use an MTU offset of {} byte(s) to compensate", ASYMETRIC_TRANSPORT_MTU_OFFSET);
     }
 
     mtuProbe_ = MTUS_[0];