You could look at the FindEmpeg source code for how to construct the UDP broadcast packet to search for an empeg. You'll have to excuse the massive unwieldy code though, I hacked it together in about a day or so.