diff --git a/tests/prefilter-multibuf-multipkts/README.md b/tests/prefilter-multibuf-multipkts/README.md
new file mode 100644
index 000000000..bfc4b75fe
--- /dev/null
+++ b/tests/prefilter-multibuf-multipkts/README.md
@@ -0,0 +1,12 @@
+Test
+====
+
+Test that multibuffer is prefiltered the right way, even if occurences of buffers
+are spanned over multiple packets, and the first try does not match.
+
+https://redmine.openinfosecfoundation.org/issues/7326
+
+PCAP
+====
+
+Pcap crafted with some http server and some python client that delays or not the writing of the headers
diff --git a/tests/prefilter-multibuf-multipkts/input.pcap b/tests/prefilter-multibuf-multipkts/input.pcap
new file mode 100644
index 000000000..fcbd9a329
Binary files /dev/null and b/tests/prefilter-multibuf-multipkts/input.pcap differ
diff --git a/tests/prefilter-multibuf-multipkts/test.rules b/tests/prefilter-multibuf-multipkts/test.rules
new file mode 100644
index 000000000..095a8ec7d
--- /dev/null
+++ b/tests/prefilter-multibuf-multipkts/test.rules
@@ -0,0 +1,3 @@
+alert http any any -> any any ( sid: 1; http.stat_code; content: "200"; fast_pattern; http.response_header; content: "first"; dataset:set,http_match,type string,save http_match.csv; file.data; content: "later";)
+alert http any any -> any any ( sid: 2; http.stat_code; content: "200"; fast_pattern; http.response_header; content: "first";)
+alert http any any -> any any ( sid: 3; http.stat_code; content: "200"; http.response_header; content: "first"; fast_pattern;)
\ No newline at end of file
diff --git a/tests/prefilter-multibuf-multipkts/test.yaml b/tests/prefilter-multibuf-multipkts/test.yaml
new file mode 100644
index 000000000..78bc76ffa
--- /dev/null
+++ b/tests/prefilter-multibuf-multipkts/test.yaml
@@ -0,0 +1,17 @@
+requires:
+  min-version: 8
+
+args:
+- -k none
+
+checks:
+- filter:
+    count: 1
+    match:
+      event_type: alert
+      alert.signature_id: 2
+- filter:
+    count: 1
+    match:
+      event_type: alert
+      alert.signature_id: 3