TODO.md: update snort with more info