Github user anandsubbu commented on the issue:
https://github.com/apache/metron/pull/1134
> metron:metron did not allow pcap topology to write as the Storm user.
Yup @mmiklavc .. on a non-kerberized cluster, I faced the same issue.---
