I was completely wrong on that one. Sorry. 
I should have checked the code first. Packetbeat does need compiled with pf_ring support and the release build doesn't do this. When building you have set the havepfring tag (go build -tags havepfring) and need to have the pf_ring headers installed.
Can you open a bug in the elastic/beats project for this.