Which server did NOD32 update from?

I am trying to debug a network issue unrelated to NOD32. I have thought up an effective experiment and the antivirus happened fit in it perfectly. But there's a catch. I need to know exactly which server from the list the antivirus updates itself from. The problem is the builtin logs don't list that, so where can I go to check this?

 

This information is not logged.

 

Either use wireshark to sniff the network traffic or clear the update cache, then open the [allusersprofile]\Application Data\ESET\ESET NOD32 Antivirus\Updfiles\. At this point you'll have to wait for a new definition to be released at which point a subfolder will be generated that will either by the FQDN or IP of the server it did the update from.

 

Hello,

A list of hostnames and IP addresses used ESET's software can be found in ESET Knowledgebase article "What addresses and ports on my third-party firewall should I open to allow full functionality for my ESET security product? ."

Regards,

Aryeh Goretsky