In VMware you also have to setup Vlan 4095 on the port group and vswitch to pass mirrored traffic to the VM. I had security onion running this way before in esxi
i am new to unraid so I am not sure if setting the vlan for an interface is possible or not