Merge pull request #1524 from stratosphereips/develop

Slips v1.1.11

Author: AlyaGomaa

.github/workflows/unit-tests.yml

@@ -37,6 +37,7 @@ jobs:
           - test_whitelist.py
           - test_arp.py
           - test_arp_poisoner.py
+          - test_arp_filter.py
           - test_blocking.py
           - test_unblocker.py
           - test_flow_handler.py

.pre-commit-config.yaml

@@ -43,3 +43,11 @@ repos:
         - id: yamllint
           args: ["-d", "{rules: {line-length: {max: 100}}}"]
           files: "slips.yaml"
+
+- repo: local
+  hooks:
+    - id: vulture
+      name: vulture dead code check
+      entry: bash -c 'files=$(git diff --cached --name-only --diff-filter=ACM | grep -E "\.py$" | grep -vE "^(tests/|migrations/)"); [ -n "$files" ] && vulture --exclude "tests/*,venv/*" $files || true'
+      language: system
+      types: [python]

CHANGELOG.md

@@ -1,3 +1,9 @@
+1.1.11 (July 3rd, 2025)
+- Fix local P2P trust model.
+- Fix SQLite cursor errors.
+- Avoid reporting own self or other slips peers when arp poisoning attackers.
+
+
 1.1.10 (May 26, 2025)
 - Add support for unblocking attackers using IP tables after a probation period.
 - Add support for blocking attackers using ARP poisoning.

README.md

@@ -1,5 +1,5 @@
 <h1 align="center">
-Slips v1.1.10
+Slips v1.1.11
 </h1>
 
 

VERSION

@@ -1 +1 @@
-1.1.10
+1.1.11

conftest.py

@@ -67,14 +67,6 @@ def profiler_queue():
     profiler_queue.put = do_nothing
     return profiler_queue
 
-
-@pytest.fixture
-def database():
-    db = DBManager(Output(), "output/", 6379)
-    db.print = do_nothing
-    return db
-
-
 @pytest.fixture
 def flow():
     """returns a dummy flow for testing"""

docker/Dockerfile

@@ -59,6 +59,7 @@ RUN apt update && apt install -y --no-install-recommends \
     nano \
     tree \
     tmux \
+    arp-scan \
     && echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_22.04/ /' |  tee /etc/apt/sources.list.d/security:zeek.list \
     && curl -fsSL https://download.opensuse.org/repositories/security:zeek/xUbuntu_22.04/Release.key | gpg --dearmor |  tee /etc/apt/trusted.gpg.d/security_zeek.gpg > /dev/null \
     && apt update \

docs/create_new_module.md

@@ -365,7 +365,8 @@ import json
 
 from slips_files.common.flow_classifier import FlowClassifier
 from slips_files.core.structures.evidence import
-    (
+
+(
     Evidence,
     ProfileID,
     TimeWindow,
@@ -378,7 +379,7 @@ from slips_files.core.structures.evidence import
     )
 from slips_files.common.parsers.config_parser import ConfigParser
 from slips_files.common.slips_utils import utils
-from slips_files.common.abstracts.module import IModule
+from slips_files.common.abstracts.imodule import IModule
 
 
 class LocalConnectionDetector(