********************
*** Generic TODO ***
********************

- Prelude source tree is mostly clean,
  some place however, are ugly as hell :
	- The packet Decoder (packet-decode.c)
	- Some place in the defragmentation stack (ip_fragment.c)

  One of the reason for theses to be ugly is the massive utilisation of
  prelude_do_report(), with big quoted text, describing an attack.


- English correction, especially when reporting an attack.
- Need a good developer documentation (use gtkdoc, already in the tree).
- Need a good user documentation.
- Support others protocol.



****************
*** Todo 0.8 ***
****************

- Integrate the Snort rules engine.
- Write missing detect / report plugins


****************
*** Todo 0.6 ***
****************

* Report Server should be optimised.
	- Read data as fast as we can, and buffer report in
	  a memory cache and a disk cache. Another thread generate
	  report. This should avoid Prelude stall when writing to
	  the socket cause the buffer is full (other end didn't 
	  read the data yet).

* HtmlMod complete redesign :
        - Shouldn't we make a DB plugin,
          used by a CGI that generate HTML ?
        - Alert are sorted from olders (top) to youngers (bottom),
                this should be inverted.

* ExecMod :
	- A Report Plugin that exec a configured program and passing it
	  a clear text report.


* Patch Pcap in order to be able to specify is own buffer managment function.
        - Hope this patch will be included in the main pcap dist.

************
*** port ***
************

- currently, Prelude run fine on Linux : x86, sparc, ppc, alpha.
- Prelude should now compile on FreeBSD, as well as Sun / Solaris.


**************************
*** Done, need testing ***
**************************
- TCP/IP options handling.
- All kind of fragmentation.


*********************
*** Todo post 1.x ***
*********************

- Create a new plugins type for higher level protocol (ssh, dns, etc...).
	- Theses kind of plugins should be able to tell Prelude Report
          about how to dump packet header... Will probably use XML for that
	  description.

- Administrative server/client which will permit to interact 
  with prelude / prelude-report & their modules.


