can you share complete packetbeat config and logs (debug mode enabled)?
please use the </> button (editor toolbar ) to format configurations and logs, so they are properly formatted and readable.
The TCP data offset greater then packet length message indicates the TCP-stream reconstruction is complaining about an invalid TCP packet length or insufficient packet capture length.