Multi-line rules do not work in the OISF engine.
move of bug from bugzilla*
Since snort 1.8 you can have rules that span multiple lines by
adding a backslash to the end of a line “\”. Currently this is not supported
by the OISF engine. snort-2.8.5 manual pg. 113