You should have watched the LCA talk where Tridge explained his reverse engineering.

He telneted the bk server and typed 'help'. It gave him a list of commands, and what they did.

LWN article on it: http://lwn.net/Articles/132938/