Oh, there's also the very useful hijack_trace_tuner=1 flag, to dump out every byte exchanged between the player and the tuner/radio module.

Cheers