There is no secret, the host caches send you pongs, just like any other servent would. The protocol is the same you would use as connecting to any other servent - a handshake (0.6 preferred, 0.4 works), send a ping and then wait for pongs.