Packetbeat on windows

Where are PostgreSQL and MySQL running? How are you performing operations? Since you are listening on the loopback device, are you sure the commands are communicating to the loopback interface and are unencrypted?