Snort rules

Date: 01/01/02

Date: 1 Jan 2002 06:29:26 -0000
From: <>

('binary' encoding is not supported, stored as-is)

According to the documentation snort will first search
the RTN's and if a match is found then it will go down
the OTN's. Does snort put information that is not
related to the packet in the OTN as well (i.e. will msg,
logto, reference)? Thanks.