Hi again Tudor.
Correction, packetbeat does read in pcap files if there are app protocol
requests and responses. The packet capture I mentioned earlier was just
raw TCP packets, at least in Wireshark the only protocol identified was
TCP. But for another capture I did there was an HTTP request and response
that packetbeat got.