![photo-dsc protocol photo-dsc protocol](https://slidetodoc.com/presentation_image_h/ce2eb118e5fe4592ea69af4bc710b611/image-15.jpg)
Doing a series of tcpdumps I was able to determine what packets make it work. I was hoping there would be one magic packet to turn these options on, but this doesn't seem to be the case. Also, the camera will remain on so you can't walk away or else your battery will continue to drain. Without this you have about 2 minutes to transfer the picture before the camera stops and you have no confirmation that it worked. This also goes for the automatic shut down feature when done. Sony requires some non-standard packets to display the 'Sending.' on the camera. The Playmemories app (or sony-pm-alt.py) see these packets and then turn around an hit the PTP/IP servers and transfer the pictures. The UPNP packets contain all the connection details.
![photo-dsc protocol photo-dsc protocol](https://cloudfront.jove.com/files/ftp_upload/10487/10487fig4.jpg)
At the same time the camera starts up A PTP/IP server on port 15740. This is also known as Simple Service Discovery Protocol (SSDP). The moment you enable the 'Send to Computer' option from the Camera it starts broadcasting UPNP UDP packets across the network to multicast address (239.255.255.250:1900). The way Sony transfers pictures is via PTP/IP (Picture Transfer Protocol over Internet Protocol). One outstanding developer has reverse-engineered the proprietary parts of Sony's modified PTP/IP protocol, and managed to get it working with a combination of a custom Python script & GPhoto2. You might want to check out this Playmemories Alternative project.