I have seen similar before - Issue was Splunk was installed on the VM and was using the same port for forwarding etc.
