The way I understand it, the Tech2 tool (when connected) sends a specific CAN frame to DICE, TWICE and what not, saying something like "ok, guys, I'm Tech2, I'm your master and from now on (till I disconnect) you are going to be in maintenance mode and will report directly to me). All of the cars components comply with this message and turn on the "three amigos" - ABS, TCS and the 'magic' alert triangle sign in the dashboard.
So in order to sniff what's going on during those comms, we need to intercept that 'master diagnostics' frame and 'learn' it so we can continue listening on what the frames with that particular CAN frame ID are sending/receiving. Given the fact that CAN bus is a broadcast network, I believe it should be ok with just uploading the 'Sniffer' code onto BlueSaab module and just sit and listen to everything that's happening while Tech2 does it's job. Then filter out Tech2 specific messages and then take it from there.
My Chinese clone Tech2 doesn't even get to the point of invoking the "three amigos". Don't know why. Maybe some day I'll just have to look what's happening on the wire with a logic analyzer or something. Anyway...
2001 9-5 SE V6; 2006 9-5 Wagon; iOS; BlueSaab version = "latest and greatest" :)