I think another reason why we removed it was that it was being flagged by antivirus tools. I am not sure that loop and stop would do anything because the resources would still be taken up by idle topologies and idle sensors. I think when we switch to containers and don't have to eat the overhead of the VM we can potentially do something like this.
I think the PCAP feature development is more or less coming to completion so I am not sure it's worth investing into this.
