There is very little useful published information on the protocol and definitely not a nice specification document.
If you're really intent on doing it, you're best off using a protocol analyser to sniff the communication between lexia and car, and a USB analyser to sniff the communication with the Lexia. When I was looking into it I found a handy software USB sniffer for windows which basically sets up a fake device to proxy and log communication. It introduced "issues" with PP2000 though
I *THINK* 406s use multiple communication methods to talk to different ECUs - propriety/VAN/CAN for the engine ECU, and VAN for everything else, although there's multiple VAN networks so I'd guess that it might use different wires to tap into the different networks. I'm pretty sure the different VAN networks run at different speeds too, daft speeds like 61Kbps and 112Kbps instead of nice sane numbers like 64/128Kbps
Someone who was on here about a year ago was starting to look into VAN communication using a PIC to interface with the comfort bus on a D9, but his web site seems down.
http://graham.auld.me.uk/projects/vanbus/index.html You may be able to find a cache somewhere if you're lucky
<steve_earwig> I think this forum is more about keeping our cars going with minimal outlay than giving our cars more reason to go bang