KNI example with pcap file

Hello. I'm a DPDK newbie, playing with KNI.

I have a packet analysis application like tshark,
which receives packets from network interface or pcap file.

My plan with KNI is
1) Performance improvement without modifying my program
2) Add ip_reassembly, acl to kni example.
   (rte_eth_rx_burst -> ip_reassembly, acl -> rte_kni_tx_burst)

If input is network interface, I think the plan is fine.
but if input is pcap file, is it possible?
Should I use vdev or something?