diff --git a/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/dpd.log b/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/dpd.log
new file mode 100644
index 0000000000..2948f61836
--- /dev/null
+++ b/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/dpd.log
@@ -0,0 +1,11 @@
+### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
+#separator \x09
+#set_separator	,
+#empty_field	(empty)
+#unset_field	-
+#path	dpd
+#open XXXX-XX-XX-XX-XX-XX
+#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	proto	analyzer	failure_reason
+#types	time	string	addr	port	addr	port	enum	string	string
+XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	192.168.12.5	51792	192.0.78.212	80	tcp	HTTP	not a http request line
+#close XXXX-XX-XX-XX-XX-XX
diff --git a/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/http.log b/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/http.log
new file mode 100644
index 0000000000..6a68dd9fe6
--- /dev/null
+++ b/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/http.log
@@ -0,0 +1,11 @@
+### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
+#separator \x09
+#set_separator	,
+#empty_field	(empty)
+#unset_field	-
+#path	http
+#open XXXX-XX-XX-XX-XX-XX
+#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	trans_depth	method	host	uri	referrer	version	user_agent	origin	request_body_len	response_body_len	status_code	status_msg	info_code	info_msg	tags	username	password	proxied	orig_fuids	orig_filenames	orig_mime_types	resp_fuids	resp_filenames	resp_mime_types
+#types	time	string	addr	port	addr	port	count	string	string	string	string	string	string	string	count	count	count	string	count	string	set[enum]	string	string	set[string]	vector[string]	vector[string]	vector[string]	vector[string]	vector[string]	vector[string]
+XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	192.168.12.5	51792	192.0.78.212	80	1	GET	zeek.org	/	-	1.1	-	-	0	162	301	Moved Permanently	-	-	(empty)	-	-	-	-	-	-	FAKHufE4EVGbXF6P	-	text/html
+#close XXXX-XX-XX-XX-XX-XX
diff --git a/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/weird.log b/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/weird.log
new file mode 100644
index 0000000000..b64f58f771
--- /dev/null
+++ b/testing/btest/Baseline/scripts.base.protocols.http.http-11-request-then-cruft/weird.log
@@ -0,0 +1,12 @@
+### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
+#separator \x09
+#set_separator	,
+#empty_field	(empty)
+#unset_field	-
+#path	weird
+#open XXXX-XX-XX-XX-XX-XX
+#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	name	addl	notice	peer	source
+#types	time	string	addr	port	addr	port	string	string	bool	string	string
+XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	192.168.12.5	51792	192.0.78.212	80	HTTP_version_mismatch	-	F	zeek	HTTP
+XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	192.168.12.5	51792	192.0.78.212	80	bad_HTTP_request	-	F	zeek	HTTP
+#close XXXX-XX-XX-XX-XX-XX
diff --git a/testing/btest/Traces/http/http-11-request-then-cruft.pcap b/testing/btest/Traces/http/http-11-request-then-cruft.pcap
new file mode 100644
index 0000000000..a9f3824476
Binary files /dev/null and b/testing/btest/Traces/http/http-11-request-then-cruft.pcap differ
diff --git a/testing/btest/scripts/base/protocols/http/http-11-request-then-cruft.pcap b/testing/btest/scripts/base/protocols/http/http-11-request-then-cruft.pcap
new file mode 100644
index 0000000000..647e8cfa73
--- /dev/null
+++ b/testing/btest/scripts/base/protocols/http/http-11-request-then-cruft.pcap
@@ -0,0 +1,7 @@
+# @TEST-EXEC: zeek -b -r $TRACES/http/http-11-request-then-cruft.pcap %INPUT > output
+# @TEST-EXEC: btest-diff http.log
+# @TEST-EXEC: btest-diff weird.log
+# @TEST-EXEC: btest-diff dpd.log
+
+@load base/protocols/http
+@load base/frameworks/notice/weird