Currently all results are written to stdout in a manner that does not facilitate ingestion by other processes. Saving results to a file would make them parseable in a programmatic fashion. This should also include the addition of command line options:

• -d for the device name
• -p for the output file prefix

Example run might look something like:

$ python iotables.py -d Nest -p thermostat nest-*.pcap
[+] Created:
thermostat-dns.txt
thermostat-transmissions.txt
thermostat-iptables.txt

A bug exists somewhere that prevents iotables.py from processing large pcaps. One workaround has been to rotate the pcaps frequently.

iotnetworklab:~ $ sudo tcpdump -n -s 0 -G 600 -w "nest-%s.pcap"

This results in many pcaps needing analysis, but iotables.py only processes one pcap at a time. Add file globbing so that all pcaps can be processed in one go.