How does Kitchen Network Utility "Load" Configuration get its information

We have controller/routers over Xbee wireless connected to Connect X4 XBee Gateway to Ethernet and a supplied utility called Kitchen Network Utility that runs on a PC on the same Ethernet lan as the gateway. In Kitchen Network Utility is a " Load Configuration" used with the IP address of the Digi Gateway. When “Load Configuration” is pressed scanning is displayed and Mac Addresses of the controller/routers found on the Gateway/Coordinator are displayed one at a time. We are wondering what this “Load Configuration” uses to get its information as we are using it primarily to locate joined controllers.

I don’t know what that software is using to achieve this as I have not seen the code you are referring to but I imagine that you could use the ND or Node Discovery command to collect the 64 bit addresses of the nodes within the network.