/*

  *  Copyright (C) 2007-2008 Sourcefire, Inc.
  *
  *  Authors: Trog

  *
  *  This program is free software; you can redistribute it and/or modify

  *  it under the terms of the GNU General Public License version 2 as
  *  published by the Free Software Foundation.

  *
  *  This program is distributed in the hope that it will be useful,
  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  *  GNU General Public License for more details.
  *
  *  You should have received a copy of the GNU General Public License
  *  along with this program; if not, write to the Free Software

  *  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
  *  MA 02110-1301, USA.

  */
 
 #ifndef __SPECIAL_H
 #define __SPECIAL_H
 

 #include "others.h"

 #define SWIZZ_MAXERRORS 2000

 struct swizz_stats {

 	uint16_t gngrams[17576];

 	uint32_t total;
 	uint32_t suspicious;
 	int has_version;
 	int has_manifest;

 	int errors;
 	int entries;

 };

 int cli_check_mydoom_log(int desc, cli_ctx *ctx);

 int cli_check_jpeg_exploit(int fd, cli_ctx *ctx);

 int cli_check_riff_exploit(int fd);

 void cli_detect_swizz_str(const unsigned char *str, uint32_t len, struct swizz_stats *stats, int blob);
 int cli_detect_swizz(struct swizz_stats *stats);

 
 #endif