I execute tshark (wireshark utility) command that reading from pcap file. Process is too slow. Sometimes take more than 6-7 seconds. Pcap file is really small (~500bytes). Actually strange thing is that re-execute same command consequently, process duration is decreasing dramatically. After wait about half minute (without execution command), re-run same command and process completion duration increase again. Why process behave like that? How to check what is going on in deep?
tshark -r test.pcap
OS : SunOS er 5.10 Generic_147441-01 i86pc i386 i86pc