The usual cause for something like that is an intercepting proxy jumping into the connection between the replica and the primary.