Subnet Scanning & Multicast.
Once I understood the protocol, the first hurdle was finding the boat on the network. The LilyGO hardware creates an ad-hoc Wi-Fi network, and the smartwatch has to work out the target device's IP address on its own. A hardcoded IP is brittle, and a blind broadcast wastes battery and congests the network, so the watch probes the subnet one address at a time.
Safe-Payload Pinging
The app runs its own subnet scanner. It iterates from subnet.1 to subnet.254, firing a crafted "zero-throttle" UDP payload. A probe that lands on the thruster leaves the motors sitting still, so discovery can never spin them up.
UDP Port 2390
The watch listens concurrently on UDP Port 2390. When the hardware receives the safe ping, it immediately returns a telemetry packet containing signal strength (RSSI) and battery voltage. The watch captures the sender's IP address and locks onto it, which completes the handshake.