The zapTo-path syntax

You can access channels like (zapTo is case sensitive):
http://192.168.0.5/cgi-bin/zapTo?path=1:0:Mode:SID:TransponderID:NetworkID:Namespace:0:0:0:

Example: 
http://192.168.0.5/cgi-bin/zapTo?path=1:0:2:f20e:421:1:c00000:0:0:0:
Start1:0 for program list entries
Mode1 for TV
2 for TV
84 maybe crypting info
87 data
8d EPG
SID Station ID
Namespace
Lists for the path parameter
Just start a query using 
http://DreamboxIP/cgi-bin/getServices?ref=0

shows program list structure, from there you can derive codes for other queries like: 
http://DreamboxIP/cgi-bin/getServices?ref=1:15:fffffffe:12:ffffffff:0:0:0:0:0:
this will list all TV services and their path parameter for the use in the zapTo command
Radiovibrations.com -> Dreambox Notes