When running the topology pcap the (pcap) parser bolt is set enabled/disabled in two configuration files, namely in topology.conf as well as in features_enabled.conf. Both files can be found in OpenSOC-Topologies/src/main/resources/OpenSOC_Configs/topologies/pcap.
Suggestion: Enable/Disable the bolt in features_enabled.conf and configure in topology.conf