Is the trace taken natively (e.g., with tcpdump or Wireshark) or was it created by some other method?