Yeah, you want to look at mac-address-table on the switches...the arp is just for the switches layer 3 interface. But yeah, there's no response coming from your netflow monitor back to the router, so that's one way traffic. I'm thinking the issue is, the router still knows the MAC of the server...