# Revision history [back]

### Filter on header field with name in dbus

I am using a pcap file generated from dbus-monitor. The dissector seems to create multiple header fields.

Header Field: PATH
Field Code: PATH (1)
Type signature: o
OBJECT_PATH: /my/object/path
Field code: DESTINATION (6)
Type signature: s
STRING: :1.23


And more of this data. It seems that dbus only contains a dbus.value.str, that contains all the data. Can I filter on a specific occurrence or header field instead? Something like dbus.value.str["DESTINATION"] would be nice.

I have also tried to make this in MATE, but I didn't get any further then

Pdu dbus_call_pdu Proto dbus Transport dbus {
Extract all_values From dbus.value.str;
};

Done;


And then I still get multiple entries.

Perhaps lua scripting can help me out here? Can I get specific indices in lua?