/*
 * hp_net_monitor.h
 * Network anomaly detector: port scan, SYN flood, ARP flood/spoof.
 * Runs a periodic task that inspects counters updated from raw sockets.
 */
#pragma once

#include <stdbool.h>

void hp_net_monitor_start(void);
void hp_net_monitor_stop(void);
bool hp_net_monitor_running(void);
int  hp_net_monitor_status(char *buf, size_t len);