The STK500 protocol is described here:
http://www.tuxgraphics.org/common/src2/article07052/stk500_spec_AVR068.pdf
Is there a particular reason other than academic curiosity or the "new toy effect" that you're trying to look at the upload process with the logic analyzer?