Hi,
normally a span port is a oneway connection, where you can sniff the data of the mirrored port.
Then remove the IP on the vmbr1, because it is not necessary.
Also, you have to set the vmbr1 in "Promiscuous Mode" to receive packages what are not for you MAC