I've kept the same instance of packetbeat and tcpdump running since my last post. I've got a 90GB pcap file sitting on my disk. Not once has tcpdump noticed any memcache traffic, and I've not seen the original error again.
I did, however, see https://github.com/elastic/beats/issues/2150. I'll be updating that issue with a snippet of the pcap file if I can 