diff --git a/testing/btest/Baseline/scripts.base.protocols.dns.dns-edns-cookie/output b/testing/btest/Baseline/scripts.base.protocols.dns.dns-edns-cookie/output
new file mode 100644
index 0000000000..647a9fa22a
--- /dev/null
+++ b/testing/btest/Baseline/scripts.base.protocols.dns.dns-edns-cookie/output
@@ -0,0 +1,4 @@
+[client_cookie=\xc8\x14\x98Z\x92\x8acB, server_cookie=]
+[client_cookie=\xc8\x14\x98Z\x92\x8acB, server_cookie==\xcd>O{\xa9$z]
+[client_cookie=1;Pl\x0b\xdd\x04s, server_cookie=]
+[client_cookie=1;Pl\x0b\xdd\x04s, server_cookie=\xb0\xb1.E\xbahYl]
\ No newline at end of file
diff --git a/testing/btest/Traces/dns-edns-cookie.pcap b/testing/btest/Traces/dns-edns-cookie.pcap
new file mode 100644
index 0000000000..07b5ab1581
Binary files /dev/null and b/testing/btest/Traces/dns-edns-cookie.pcap differ
diff --git a/testing/btest/scripts/base/protocols/dns/dns-edns-cookie.zeek b/testing/btest/scripts/base/protocols/dns/dns-edns-cookie.zeek
new file mode 100644
index 0000000000..6875099ec9
--- /dev/null
+++ b/testing/btest/scripts/base/protocols/dns/dns-edns-cookie.zeek
@@ -0,0 +1,8 @@
+# @TEST-EXEC: zeek -C -r $TRACES/dns-edns-cookie.pcap %INPUT > output
+# @TEST-EXEC: btest-diff output
+@load policy/protocols/dns/auth-addl
+
+event dns_EDNS_cookie(c: connection, msg: dns_msg, opt: dns_edns_cookie)
+    {
+        print opt;
+    } 
\ No newline at end of file