To my best knowledge the TACX trainers don't follow any public ANT+ profile (except for receiving heart rate from an ANT+ hr belt and power from an ANT+ power meter). Transfer of control messages and measurement data follows a private protocol on top of ANT transport.
If Tacx say they can't (won't) tell you details of that protocol, there's no legal way to "spy" these communications.
Cheers,
OMB