The only explanation/possibility I've found is this but there is no solution: https://lists.apache.org/x/thread.html/702e4a65ba8e7d9ae39625d61674caa4e9f83daeef5ef7ad4b863682@%3Cuser.accumulo.apache.org%3E   "Ahh, looks like it was the ambari-agent process, part of HDP. Since that runs on the same machine, it wasn't in my tcpdump. Second time ambari-agent has done something unexpected for me! (first was renewing a keytab behind my back)" ... View more