NAME
wlmscpfs - DICOM Basic Worklist Management SCP (based on data files)
SYNOPSIS
wlmscpfs [options] port
DESCRIPTION
The wlmscpfs application implements a Service Class Provider (SCP) for the Basic Worklist Management Service. The application will listen on a specified TCP/IP port for incoming association requests from a Worklist Management SCU. In case an association was acknowledged and a worklist query was received, the wlmscpfs application will query particular files in a certain directory (which can be specified through corresponding program options) on the file system for corresponding worklist information, and it will send this information back to the calling Worklist Management SCU. Aside from dealing with Worklist Management queries, the wlmscpfs application also supports the Verification Service Class as an SCP.
PARAMETERS
port tcp/ip port number to listen on
OPTIONS
general options
-h --help
print this help text and exit
--version
print version information and exit
--arguments
print expanded command line arguments
-q --quiet
quiet mode, print no warnings and errors
-v --verbose
verbose mode, print processing details
-d --debug
debug mode, print debug information
-ll --log-level [l]evel: string constant
(fatal, error, warn, info, debug, trace)
use level l for the logger
-lc --log-config [f]ilename: string
use config file f for the logger
multi-process options
-s --single-process
single process mode
--fork
fork child process for each association (default)
input options
general:
-dfp --data-files-path [p]ath: string (default: .)
path to worklist data files
handling of worklist files:
-efr --enable-file-reject
enable rejection of incomplete worklist files (default)
-dfr --disable-file-reject
disable rejection of incomplete worklist files
processing options
returned character set:
-cs0 --return-no-char-set
return no specific character set (default)
-cs1 --return-iso-ir-100
return specific character set ISO IR 100
-csk --keep-char-set
return character set provided in file
handling of return key attributes:
+ear --enable-all-return
accept any (non-sequence) attribute on main
dataset level as return key
-ear --disable-all-return
accept supported return keys only (default)
other processing options:
-nse --no-sq-expansion
disable expansion of empty sequences in C-FIND
request messages
network options
IP protocol version:
-i4 --ipv4
use IPv4 only (default)
-i6 --ipv6
use IPv6 only
-i0 --ip-auto
use IPv6/IPv4 dual stack
preferred network transfer syntaxes:
+x= --prefer-uncompr
prefer explicit VR local byte order (default)
+xe --prefer-little
prefer explicit VR little endian TS
+xb --prefer-big
prefer explicit VR big endian TS
+xd --prefer-deflated
prefer deflated explicit VR little endian TS
+xi --implicit
accept implicit VR little endian TS only
network host access control (tcp wrapper):
-ac --access-full
accept connections from any host (default)
+ac --access-control
enforce host access control rules
post-1993 value representations:
+u --enable-new-vr
enable support for new VRs (UN/UT) (default)
-u --disable-new-vr
disable support for new VRs, convert to OB
deflate compression level (only with --prefer-deflated):
+cl --compression-level [l]evel: integer (default: 6)
0=uncompressed, 1=fastest, 9=best compression
other network options:
-ta --acse-timeout [s]econds: integer (default: 30)
timeout for ACSE messages
-td --dimse-timeout [s]econds: integer (default: unlimited)
timeout for DIMSE messages
--max-associations [a]ssocs: integer (default: 50)
limit maximum number of parallel associations
--refuse
refuse association
--reject
reject association if no implementation class UID
--no-fail
don't fail on an invalid query
--sleep-before [s]econds: integer
sleep s seconds before find (default: 0)
--sleep-after [s]econds: integer
sleep s seconds after find (default: 0)
--sleep-during [s]econds: integer
sleep s seconds during find (default: 0)
-pdu --max-pdu [n]umber of bytes: integer (4096..131072)
set max receive pdu to n bytes (default: 16384)
-dhl --disable-host-lookup
disable hostname lookup
transport layer security (TLS) options
transport protocol stack:
-tls --disable-tls
use normal TCP/IP connection (default)
+tls --enable-tls [p]rivate key file, [c]ertificate file: string
use authenticated secure TLS connection
private key password (only with --enable-tls):
+ps --std-passwd
prompt user to type password on stdin (default)
+pw --use-passwd [p]assword: string
use specified password
-pw --null-passwd
use empty string as password
key and certificate file format:
-pem --pem-keys
read keys and certificates as PEM file (default)
-der --der-keys
read keys and certificates as DER file
certification authority:
+cf --add-cert-file [f]ilename: string
add certificate file to list of certificates
+cd --add-cert-dir [d]irectory: string
add certificates in d to list of certificates
+crl --add-crl-file [f]ilename: string
add certificate revocation list file
(implies --enable-crl-vfy)
+crv --enable-crl-vfy
enable leaf CRL verification
+cra --enable-crl-all
enable full chain CRL verification
security profile:
+ph --list-profiles
list supported TLS profiles and exit
+pg --profile-8996
BCP 195 RFC 8996 TLS Profile (default)
+pm --profile-8996-mod
Modified BCP 195 RFC 8996 TLS Profile
# only available if underlying TLS library supports
# all TLS features required for this profile
+py --profile-bcp195-nd
Non-downgrading BCP 195 TLS Profile (retired)
+px --profile-bcp195
BCP 195 TLS Profile (retired)
+pz --profile-bcp195-ex
Extended BCP 195 TLS Profile (retired)
+pb --profile-basic
Basic TLS Secure Transport Connection Profile (retired)
# only available if underlying TLS library supports 3DES
+pa --profile-aes
AES TLS Secure Transport Connection Profile (retired)
+pn --profile-null
Authenticated unencrypted communication
(retired, was used in IHE ATNA)
ciphersuite:
+cc --list-ciphers
list supported TLS ciphersuites and exit
+cs --cipher [c]iphersuite name: string
add ciphersuite to list of negotiated suites
+dp --dhparam [f]ilename: string
read DH parameters for DH/DSS ciphersuites
server name indication:
--no-sni
do not use SNI (default)
--expect-sni [s]erver name: string
expect requests for server name s
pseudo random generator:
+rs --seed [f]ilename: string
seed random generator with contents of f
+ws --write-seed
write back modified seed (only with --seed)
+wf --write-seed-file [f]ilename: string (only with --seed)
write modified seed to file f
peer authentication:
-rc --require-peer-cert
verify peer certificate, fail if absent (default)
-vc --verify-peer-cert
verify peer certificate if present
-ic --ignore-peer-cert
don't verify peer certificate
output options
general:
-rfp --request-file-path [p]ath: string
path to store request files to
-rff --request-file-format [f]ormat: string (default: #t.dump)
request file name format
NOTES
The semantic impacts of the above mentioned options is clear for the majority of options. Some particular options, however, are so specific that they need detailed descriptions which will be given in this passage.
The returned character set options are intended for situations in which the wlmscpfs application will return attribute values which are not composed of characters from the DICOM default character repertoire. In such cases, for example option --return-iso-ir-100 can be used to specify that a response to a modality's worklist management C-FIND request shall contain DICOM's Specific Character Set attribute (0008,0005) with a corresponding value, indicating the character repertoire from which the characters of returned attribute values were taken (in this example the repertoire ISO IR 100). Please note that the wlmscpfs application will not make sure that all returned values are actually made up of this character repertoire; the application expects this to be the case.
In general, the Specific Character Set attribute (0008,0005) will only be included in the C-FIND response if it contains any attributes that are affected by the character set, i.e. for value representations PN, LO, LT, SH, ST and UT.
Please note that a C-FIND request which is handled by this application may contain DICOM's Specific Character Set attribute (0008,0005), but this application will never use this attribute's value for matching. Besides, the question if DICOM's Specific Character Set attribute (0008,0005) will be contained in a C-FIND response which is returned by this application is always determined by the returned character set option which was specified when this application was started.
The options --enable-file-reject and --disable-file-reject can be used to enable or disable a file rejection mechanism which makes sure only complete worklist files will be used during the matching process. A worklist file is considered to be complete if it contains all necessary type 1 information which the SCP might have to return to an SCU in a C-FIND response message. Table K.6-1 in part 4 annex K of the DICOM standard lists all corresponding type 1 attributes (see column "Return Key Type").
The called Application Entity Title from an incoming A-ASSOCIATE-RQ is used as a subdirectory name below the --data-file-path directory in order to look up the worklist files that this association may access. The DICOM VR AE (see DICOM PS3.5 Section 6.1.3) permits the characters "/" (forward slash) and "." (full stop), so a conformant peer can send an AE title such as "../OTHER" that would resolve to a sibling directory of the configured worklist root. To prevent this, wlmscpfs rejects any A-ASSOCIATE-RQ whose called AE title is not safe to use as a single filesystem path component. The set of accepted characters is letters, digits, space and the characters "-", ":", "@" and "_"; any other byte (path separators "/" and "\\", NUL, control bytes, bytes outside the printable ASCII range, shell metacharacters as well as the dot character) causes the association to be rejected. Dots are rejected outright (rather than only the standalone components "." and "..") because real-world AE titles nevercontain dots and rejecting the entire character avoids any need to reasonabout platform-specific path normalization corner cases.@subsection wlmscpfs_request_files Writing Request FilesProviding option \e --request-file-path enables writing of the incoming C-FINDrequests into text files. The option value provides the target directory wherethese files will be stored. All request files are stored in "dump" format asprovided by the \b dcmdump tool and are raw, i.e. they are written as theyarrive at \b wlmscpfs, without any tag processing applied by \b wlmscpfs.Writing request files allows users to "interactively" prepare the worklistdatabase (for \b wlmscpfs the worklist files served from the \e --data-file-pathdirectory) by watching the request file directory. Once a request file appears,one needs some time to update worklist entries in the database. For thatreason it makes sense to use \e --request-file-path in combination with option\e --sleep-before which lets users specify a certain amount of seconds that\b wlmscpfs should wait before actually starting to check the worklist database.Note that the request files written with \e --data-file-path are notautomatically deleted by \b wlmscpfs.If request files are enabled, \b wlmscpfs must automatically create file nameswithin the given directory. By default, the format is \<timestamp\>.dump where\<timestamp\> is in the format YYYYMMDDhhmmssffffff where:- YYYY is the current year- MM is the current month- DD is the current day- hh are the current hours (in 24 hour format)- mm are the current minutes- ss are the current seconds and- ffffff is the fraction of the current secondThis should work as a default for most applications that would like to userequest files and want to ensure unique file names. If it is desired to changethis naming scheme, the option \e --request-file-format can be used. Itpermits one to specify the file naming pattern used by \e --request-file-path.For flexibility, the following placeholders can be used in the pattern providedfor \e --request-file-format:- \#a: calling application entity title of the peer SCU- \#c: called application entity title (AE title of worklist SCP application)- \#i: process id of the worklist SCP application process handling the request- \#p: patient ID if present, otherwise empty string- \#t: timestamp in the format YYYYMMDDhhmmssffffffThe default (i.e. the value if \e --request-file-format is not explicitly set)is \#t.dump resulting in the timestamp format described above.An example for such a user-defined format string would be"request_#i_#a_#c.txt". The \#i makes most sense if \b wlmscpfs multi-processmode is enabled via \e --fork option in order to ensure that simultaneousrequest will not result in the same file name for both requests.It should be noted that the \#p placeholder uses the value of Patient ID(0010,0020) from the request as is, i.e. if the string contains non-ASCIIcharacters, the file name computed by \b wlmscpfs might be broken and thuscannot be written successfully or will look broken once written. Also, an emptyPatient ID is used as such, i.e. the \#p will be replaced with an empty string.For security reasons, the values substituted for the placeholders \#a, \#c and\#p are sanitized before they are inserted into the resulting file name: pathseparators ("/", "\") and other characters that are not safe in a file namecomponent are replaced with the underscore character ("_"). This preventsattacker-controlled values transmitted over the network (called/calling AEtitle, Patient ID) from escaping the configured request file directory.@subsection wlmscpfs_dicom_conformance DICOM ConformanceThe \b wlmscpfs application supports the following SOP Classes as an SCP:@verbatim VerificationSOPClass 1.2.840.10008.1.1FINDModalityWorklistInformationModel 1.2.840.10008.5.1.4.31\endverbatimThe \b wlmscpfs application will accept presentation contexts for all of theabovementioned supported SOP Classes using any of the transfer syntaxes:@verbatim LittleEndianImplicitTransferSyntax 1.2.840.10008.1.2LittleEndianExplicitTransferSyntax 1.2.840.10008.1.2.1BigEndianExplicitTransferSyntax 1.2.840.10008.1.2.2\endverbatimThe default behavior of the \b wlmscpfs application is to prefer transfersyntaxes having an explicit encoding over the default implicit transfersyntax. If \b wlmscpfs is running on big-endian hardware it will preferBigEndianExplicit to LittleEndianExplicit transfer syntax (and vice versa).This behavior can be changed with the \e --prefer options (see above).If compiled with zlib support enabled (see \e --version output) and ifoption \e --prefer-deflated is used, also the following transfer syntaxis accepted.@verbatim DeflatedExplicitVRLittleEndianTransferSyntax 1.2.840.10008.1.2.1.99\endverbatimThe \b wlmscpfs application does not support extended negotiation.Currently, the \b wlmscpfs application supports the following attributes asmatching keys:@verbatim (0008,0020) StudyDate(0008,0030) StudyTime(0008,0050) AccessionNumber(0008,0090) ReferringPhysicianName(0010,0010) PatientName(0010,0020) PatientID(0010,0021) IssuerOfPatientID(0010,0030) PatientBirthDate(0010,0040) PatientSex(0010,2201) PatientSpeciesDescription(0010,2202) PatientSpeciesCodeSequence (0008,0100) > CodeValue (0008,0102) > CodingSchemeDesignator (0008,0103) > CodingSchemeVersion (0008,0104) > CodeMeaning(0010,2203) PatientSexNeutered(0010,2292) PatientBreedDescription(0010,2293) PatientBreedCodeSequence (0008,0100) > CodeValue (0008,0102) > CodingSchemeDesignator (0008,0103) > CodingSchemeVersion (0008,0104) > CodeMeaning(0010,2294) BreedRegistrationSequence (0010,2295) > BreedRegistrationNumber (0010,2296) > BreedRegistryCodeSequence (0008,0100) > > CodeValue (0008,0102) > > CodingSchemeDesignator (0008,0103) > > CodingSchemeVersion (0008,0104) > > CodeMeaning(0010,2297) ResponsiblePerson(0010,2298) ResponsiblePersonRole(0010,2299) ResponsibleOrganization(0032,1032) RequestingPhysician(0038,0010) AdmissionID(0040,0100) ScheduledProcedureStepSequence (0008,0060) > Modality (0040,0001) > ScheduledStationAETitle (0040,0002) > ScheduledProcedureStepStartDate (0040,0003) > ScheduledProcedureStepStartTime (0040,0006) > ScheduledPerformingPhysicianName(0040,1001) RequestedProcedureID(0040,1003) RequestedProcedurePriority\endverbatimAs return keys the following attributes are currently supported by \b wlmscpfs:@verbatim (0008,0020) StudyDate(0008,0030) StudyTime(0008,1030) StudyDescription(0008,0050) AccessionNumber(0008,0080) InstitutionName(0008,0081) InstitutionAddress(0008,1040) InstitutionalDepartmentName(0008,0090) ReferringPhysicianName(0008,0092) ReferringPhysicianAddress(0008,0082) InstitutionCodeSequence (0008,0100) > CodeValue (0008,0102) > CodingSchemeDesignator (0008,0103) > CodingSchemeVersion (0008,0104) > CodeMeaning(0008,1041) InstitutionalDepartmentTypeCodeSequence (0008,0100) > CodeValue (0008,0102) > CodingSchemeDesignator (0008,0103) > CodingSchemeVersion (0008,0104) > CodeMeaning(0008,1080) AdmittingDiagnosesDescription(0008,1110) ReferencedStudySequence (0008,1150) > ReferencedSOPClassUID (0008,1155) > ReferencedSOPInstanceUID(0008,1120) ReferencedPatientSequence (0008,1150) > ReferencedSOPClassUID (0008,1155) > ReferencedSOPInstanceUID(0010,0010) PatientName(0010,0020) PatientID(0010,0021) IssuerOfPatientID(0010,0030) PatientBirthDate(0010,1010) PatientAge(0010,0040) PatientSex(0010,1000) OtherPatientIDs (retired)(0010,1001) OtherPatientNames(0010,1020) PatientSize(0010,1030) PatientWeight(0010,2201) PatientSpeciesDescription(0010,2202) PatientSpeciesCodeSequence (0008,0100) > CodeValue (0008,0102) > CodingSchemeDesignator (0008,0103) > CodingSchemeVersion (0008,0104) > CodeMeaning(0010,2203) PatientSexNeutered(0010,2292) PatientBreedDescription(0010,2293) PatientBreedCodeSequence (0008,0100) > CodeValue (0008,0102) > CodingSchemeDesignator (0008,0103) > CodingSchemeVersion (0008,0104) > CodeMeaning(0010,2294) BreedRegistrationSequence (0010,2295) > BreedRegistrationNumber (0010,2296) > BreedRegistryCodeSequence (0008,0100) > > CodeValue (0008,0102) > > CodingSchemeDesignator (0008,0103) > > CodingSchemeVersion (0008,0104) > > CodeMeaning(0010,1040) PatientAddress(0010,1080) MilitaryRank(0010,2000) MedicalAlerts(0010,2110) ContrastAllergies(0010,2160) EthnicGroup (retired)(0010,21a0) SmokingStatus(0010,21b0) AdditionalPatientHistory(0010,21c0) PregnancyStatus(0010,21d0) LastMenstrualDate(0010,2297) ResponsiblePerson(0010,2298) ResponsiblePersonRole(0010,2299) ResponsibleOrganization(0010,4000) PatientComments(0020,000d) StudyInstanceUID(0032,1032) RequestingPhysician(0032,1033) RequestingService(0032,1060) RequestedProcedureDescription(0032,1064) RequestedProcedureCodeSequence (0008,0100) > CodeValue (0008,0102) > CodingSchemeDesignator (0008,0103) > CodingSchemeVersion (0008,0104) > CodeMeaning(0038,0010) AdmissionID(0038,0011) IssuerOfAdmissionID(0038,0050) SpecialNeeds(0038,0300) CurrentPatientLocation(0038,0500) PatientState(0040,0100) ScheduledProcedureStepSequence (0008,0060) > Modality (0032,1070) > RequestedContrastAgent (0040,0001) > ScheduledStationAETitle (0040,0002) > ScheduledProcedureStepStartDate (0040,0003) > ScheduledProcedureStepStartTime (0040,0004) > ScheduledProcedureStepEndDate (0040,0005) > ScheduledProcedureStepEndTime (0040,0006) > ScheduledPerformingPhysicianName (0040,0007) > ScheduledProcedureStepDescription (0040,0008) > ScheduledProtocolCodeSequence (0008,0100) > > CodeValue (0008,0102) > > CodingSchemeDesignator (0008,0103) > > CodingSchemeVersion (0008,0104) > > CodeMeaning (0040,0009) > ScheduledProcedureStepID (0040,0010) > ScheduledStationName (0040,0011) > ScheduledProcedureStepLocation (0040,0012) > PreMedication (0040,0020) > ScheduledProcedureStepStatus (0040,0400) > CommentsOnTheScheduledProcedureStep(0040,1001) RequestedProcedureID(0040,1002) ReasonForTheRequestedProcedure(0040,1003) RequestedProcedurePriority(0040,1004) PatientTransportArrangements(0040,1005) RequestedProcedureLocation(0040,1008) ConfidentialityCode(0040,1009) ReportingPriority(0040,1010) NamesOfIntendedRecipientsOfResults(0040,1400) RequestedProcedureComments(0040,2001) ReasonForTheImagingServiceRequest(0040,2004) IssueDateOfImagingServiceRequest(0040,2005) IssueTimeOfImagingServiceRequest(0040,2008) OrderEnteredBy(0040,2009) OrderEnterersLocation(0040,2010) OrderCallbackPhoneNumber(0040,2016) PlacerOrderNumberImagingServiceRequest(0040,2017) FillerOrderNumberImagingServiceRequest(0040,2400) ImagingServiceRequestComments(0040,3001) ConfidentialityConstraintOnPatientDataDescription\endverbatimThe attribute (0008,0005) SpecificCharacterSet is a special case and itssupport by \b wlmscpfs is discussed in the NOTES section above.Note that if the return key attribute (0010,21c0) PregnancyStatus isrequested but not contained in a worklist file, it is returned with value 4("unknown") instead of an empty value.The option \e --enable-all-return can be used to lift the above restrictionon the set of supported return key attributes: any other non-sequenceattribute on the main level of the query is then also accepted as a returnkey attribute and filled with the value found in the matching worklist file,or returned with an empty value if the worklist file does not contain theattribute. Such attributes consequently no longer cause the C-FIND responsestatus "Pending with warning" to be returned. Sequence attributes as wellas attributes within sequences are not affected by this option.@subsection wlmscpfs_access_control Access ControlWhen compiled on Unix platforms with TCP wrapper support, host-based accesscontrol can be enabled with the \e --access-control command line option. Inthis case the access control rules defined in the system's host access controltables for \b wlmscpfs are enforced. The default locations of the host accesscontrol tables are <em>/etc/hosts.allow</em> and <em>/etc/hosts.deny</em>.Further details are described in <b>hosts_access</b>(5).@section wlmscpfs_logging LOGGINGThe level of logging output of the various command line tools and underlyinglibraries can be specified by the user. By default, only errors and warningsare written to the standard error stream. Using option \e --verbose alsoinformational messages like processing details are reported. Option\e --debug can be used to get more details on the internal activity, e.g. fordebugging purposes. Other logging levels can be selected using option\e --log-level. In \e --quiet mode only fatal errors are reported. In suchvery severe error events, the application will usually terminate. For moredetails on the different logging levels, see documentation of module "oflog".In case the logging output should be written to file (optionally with logfilerotation), to syslog (Unix) or the event log (Windows) option \e --log-configcan be used. This configuration file also allows for directing only certainmessages to a particular output stream and for filtering certain messagesbased on the module or application where they are generated. An exampleconfiguration file is provided in <em>\<etcdir\>/logger.cfg</em>.@section wlmscpfs_command_line COMMAND LINEAll command line tools use the following notation for parameters: squarebrackets enclose optional values (0-1), three trailing dots indicate thatmultiple values are allowed (1-n), a combination of both means 0 to n values.Command line options are distinguished from parameters by a leading '+' or '-'sign, respectively. Usually, order and position of command line options arearbitrary (i.e. they can appear anywhere). However, if options are mutuallyexclusive the rightmost appearance is used. This behavior conforms to thestandard evaluation rules of common Unix shells.In addition, one or more command files can be specified using an '@' sign as aprefix to the filename (e.g. <em>\@command.txt</em>). Such a command argumentis replaced by the content of the corresponding text file (multiplewhitespaces are treated as a single separator unless they appear between twoquotation marks) prior to any further evaluation. Please note that a commandfile cannot contain another command file. This simple but effective approachallows one to summarize common combinations of options/parameters and avoidslongish and confusing command lines (an example is provided in file<em>\<datadir\>/dumppat.txt</em>).@section wlmscpfs_environment ENVIRONMENTThe \b wlmscpfs utility will attempt to load DICOM data dictionaries specifiedin the \e DCMDICTPATH environment variable. By default, i.e. if the\e DCMDICTPATH environment variable is not set, the file<em>\<datadir\>/dicom.dic</em> will be loaded unless the dictionary is builtinto the application (default for Windows).The default behavior should be preferred and the \e DCMDICTPATH environmentvariable only used when alternative data dictionaries are required. The\e DCMDICTPATH environment variable has the same format as the Unix shell\e PATH variable in that a colon (":") separates entries. On Windows systems,a semicolon (";") is used as a separator. The data dictionary code will attempt to load each file specified in the DCMDICTPATH environment variable. It is an error if no data dictionary can be loaded.
COPYRIGHT
Copyright (C) 1996-2026 by OFFIS e.V., Escherweg 2, 26121 Oldenburg, Germany.