diff --git a/testing/btest/Baseline/scripts.base.protocols.tcp.krb-tcp-tso/kerberos.log b/testing/btest/Baseline/scripts.base.protocols.tcp.krb-tcp-tso/kerberos.log
new file mode 100644
index 0000000000..75ec7ed782
--- /dev/null
+++ b/testing/btest/Baseline/scripts.base.protocols.tcp.krb-tcp-tso/kerberos.log
@@ -0,0 +1,21 @@
+### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
+#separator \x09
+#set_separator	,
+#empty_field	(empty)
+#unset_field	-
+#path	kerberos
+#open XXXX-XX-XX-XX-XX-XX
+#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	request_type	client	service	success	error_msg	from	till	cipher	forwardable	renewable	client_cert_subject	client_cert_fuid	server_cert_subject	server_cert_fuid
+#types	time	string	addr	port	addr	port	string	string	string	bool	string	time	time	string	bool	bool	string	string	string	string
+XXXXXXXXXX.XXXXXX	ClEkJM2Vm5giqnMf4h	172.16.0.211	49812	172.16.0.100	88	AS	administrator/TEST.LOCAL	krbtgt/TEST.LOCAL	F	KDC_ERR_PREAUTH_REQUIRED	-	XXXXXXXXXX.XXXXXX	-	T	T	-	-	-	-
+XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.16.0.211	49813	172.16.0.100	88	AS	administrator/TEST.LOCAL	krbtgt/TEST.LOCAL	T	-	-	XXXXXXXXXX.XXXXXX	aes256-cts-hmac-sha1-96	T	T	-	-	-	-
+XXXXXXXXXX.XXXXXX	CtPZjS20MLrsMUOJi2	172.16.0.211	49814	172.16.0.100	88	TGS	Administrator/TEST.LOCAL	cifs/win7.test.local	T	-	-	XXXXXXXXXX.XXXXXX	aes256-cts-hmac-sha1-96	T	T	-	-	-	-
+XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.16.0.211	49811	172.16.0.5	445	-	-	-	-	-	-	-	-	-	-	-	-	-	-
+XXXXXXXXXX.XXXXXX	CUM0KZ3MLUfNB0cl11	172.16.0.211	49815	172.16.0.100	445	-	-	-	-	-	-	-	-	-	-	-	-	-	-
+XXXXXXXXXX.XXXXXX	CP5puj4I8PtEU4qzYg	172.16.0.211	49822	172.16.0.100	88	TGS	DESKTOP-RBDMVVA$/TEST.LOCAL	cifs/WIN-R5NF6DMLDVH	T	-	-	XXXXXXXXXX.XXXXXX	aes256-cts-hmac-sha1-96	T	T	-	-	-	-
+XXXXXXXXXX.XXXXXX	CmES5u32sYpV7JYN	172.16.0.211	49821	172.16.0.100	445	-	-	-	-	-	-	-	-	-	-	-	-	-	-
+XXXXXXXXXX.XXXXXX	C3eiCBGOLw3VtHfOj	172.16.0.211	49828	172.16.0.100	88	AS	administrator/TEST.LOCAL	krbtgt/TEST.LOCAL	F	KDC_ERR_PREAUTH_REQUIRED	-	XXXXXXXXXX.XXXXXX	-	T	T	-	-	-	-
+XXXXXXXXXX.XXXXXX	CwjjYJ2WqgTbAqiHl6	172.16.0.211	49829	172.16.0.100	88	AS	administrator/TEST.LOCAL	krbtgt/TEST.LOCAL	T	-	-	XXXXXXXXXX.XXXXXX	aes256-cts-hmac-sha1-96	T	T	-	-	-	-
+XXXXXXXXXX.XXXXXX	C0LAHyvtKSQHyJxIl	172.16.0.211	49830	172.16.0.100	88	TGS	Administrator/TEST.LOCAL	cifs/win7.test.local	T	-	-	XXXXXXXXXX.XXXXXX	aes256-cts-hmac-sha1-96	T	T	-	-	-	-
+XXXXXXXXXX.XXXXXX	C37jN32gN3y3AZzyf6	172.16.0.211	49827	172.16.0.5	445	-	-	-	-	-	-	-	-	-	-	-	-	-	-
+#close XXXX-XX-XX-XX-XX-XX
diff --git a/testing/btest/Traces/krb/kerberos_tso.pcap b/testing/btest/Traces/krb/kerberos_tso.pcap
new file mode 100644
index 0000000000..a3cc083267
Binary files /dev/null and b/testing/btest/Traces/krb/kerberos_tso.pcap differ
diff --git a/testing/btest/scripts/base/protocols/tcp/krb-tcp-tso.test b/testing/btest/scripts/base/protocols/tcp/krb-tcp-tso.test
new file mode 100644
index 0000000000..57c46989f4
--- /dev/null
+++ b/testing/btest/scripts/base/protocols/tcp/krb-tcp-tso.test
@@ -0,0 +1,6 @@
+# This test checks that packets get forwarded to a protocol analyzer,
+# even when TCP segment offloading is enabled, and the IP length field is
+# not correctly filled out. This requires -C to be passed.
+#
+# @TEST-EXEC: zeek -C -r $TRACES/krb/kerberos_tso.pcap
+# @TEST-EXEC: btest-diff kerberos.log