I just used Ethereal to trace the conversation between my Windows server and the Rio Receiver sat on my desk.

The first UDP packet is sent from the server to the Receiver (i.e. not broadcast), containing "State?"

The response is sent from the Receiver to the server, containing "State!", and the FID and timecode. It also contains the Receiver's MAC address (due to a limitation in the Windows networking stack).