--- name: "wlmscpfs" section: "1" platform: "linux" package: "dcmtk" version: "3.7.1-1" release: "Arch Linux 2026-11-01" platforms: ["linux"] url: "https://new.carta.tech/wlmscpfs" --- # wlmscpfs(1) DICOM Basic Worklist Management SCP (based on data files) ## NAME wlmscpfs - DICOM Basic Worklist Management SCP (based on data files) ## SYNOPSIS ``` wlmscpfs [options] port ``` ## DESCRIPTION The **wlmscpfs** application implements a Service Class Provider (SCP) for the Basic Worklist Management Service. The application will listen on a specified TCP/IP port for incoming association requests from a Worklist Management SCU. In case an association was acknowledged and a worklist query was received, the **wlmscpfs** application will query particular files in a certain directory (which can be specified through corresponding program options) on the file system for corresponding worklist information, and it will send this information back to the calling Worklist Management SCU. Aside from dealing with Worklist Management queries, the **wlmscpfs** application also supports the Verification Service Class as an SCP. ## PARAMETERS ``` port tcp/ip port number to listen on ``` ## OPTIONS ### general options ``` -h --help print this help text and exit --version print version information and exit --arguments print expanded command line arguments -q --quiet quiet mode, print no warnings and errors -v --verbose verbose mode, print processing details -d --debug debug mode, print debug information -ll --log-level [l]evel: string constant (fatal, error, warn, info, debug, trace) use level l for the logger -lc --log-config [f]ilename: string use config file f for the logger ``` ### multi-process options ``` -s --single-process single process mode --fork fork child process for each association (default) ``` ### input options ``` general: -dfp --data-files-path [p]ath: string (default: .) path to worklist data files handling of worklist files: -efr --enable-file-reject enable rejection of incomplete worklist files (default) -dfr --disable-file-reject disable rejection of incomplete worklist files ``` ### processing options ``` returned character set: -cs0 --return-no-char-set return no specific character set (default) -cs1 --return-iso-ir-100 return specific character set ISO IR 100 -csk --keep-char-set return character set provided in file handling of return key attributes: +ear --enable-all-return accept any (non-sequence) attribute on main dataset level as return key -ear --disable-all-return accept supported return keys only (default) other processing options: -nse --no-sq-expansion disable expansion of empty sequences in C-FIND request messages ``` ### network options ``` IP protocol version: -i4 --ipv4 use IPv4 only (default) -i6 --ipv6 use IPv6 only -i0 --ip-auto use IPv6/IPv4 dual stack preferred network transfer syntaxes: +x= --prefer-uncompr prefer explicit VR local byte order (default) +xe --prefer-little prefer explicit VR little endian TS +xb --prefer-big prefer explicit VR big endian TS +xd --prefer-deflated prefer deflated explicit VR little endian TS +xi --implicit accept implicit VR little endian TS only network host access control (tcp wrapper): -ac --access-full accept connections from any host (default) +ac --access-control enforce host access control rules post-1993 value representations: +u --enable-new-vr enable support for new VRs (UN/UT) (default) -u --disable-new-vr disable support for new VRs, convert to OB deflate compression level (only with --prefer-deflated): +cl --compression-level [l]evel: integer (default: 6) 0=uncompressed, 1=fastest, 9=best compression other network options: -ta --acse-timeout [s]econds: integer (default: 30) timeout for ACSE messages -td --dimse-timeout [s]econds: integer (default: unlimited) timeout for DIMSE messages --max-associations [a]ssocs: integer (default: 50) limit maximum number of parallel associations --refuse refuse association --reject reject association if no implementation class UID --no-fail don't fail on an invalid query --sleep-before [s]econds: integer sleep s seconds before find (default: 0) --sleep-after [s]econds: integer sleep s seconds after find (default: 0) --sleep-during [s]econds: integer sleep s seconds during find (default: 0) -pdu --max-pdu [n]umber of bytes: integer (4096..131072) set max receive pdu to n bytes (default: 16384) -dhl --disable-host-lookup disable hostname lookup ``` ### transport layer security (TLS) options ``` transport protocol stack: -tls --disable-tls use normal TCP/IP connection (default) +tls --enable-tls [p]rivate key file, [c]ertificate file: string use authenticated secure TLS connection private key password (only with --enable-tls): +ps --std-passwd prompt user to type password on stdin (default) +pw --use-passwd [p]assword: string use specified password -pw --null-passwd use empty string as password key and certificate file format: -pem --pem-keys read keys and certificates as PEM file (default) -der --der-keys read keys and certificates as DER file certification authority: +cf --add-cert-file [f]ilename: string add certificate file to list of certificates +cd --add-cert-dir [d]irectory: string add certificates in d to list of certificates +crl --add-crl-file [f]ilename: string add certificate revocation list file (implies --enable-crl-vfy) +crv --enable-crl-vfy enable leaf CRL verification +cra --enable-crl-all enable full chain CRL verification security profile: +ph --list-profiles list supported TLS profiles and exit +pg --profile-8996 BCP 195 RFC 8996 TLS Profile (default) +pm --profile-8996-mod Modified BCP 195 RFC 8996 TLS Profile # only available if underlying TLS library supports # all TLS features required for this profile +py --profile-bcp195-nd Non-downgrading BCP 195 TLS Profile (retired) +px --profile-bcp195 BCP 195 TLS Profile (retired) +pz --profile-bcp195-ex Extended BCP 195 TLS Profile (retired) +pb --profile-basic Basic TLS Secure Transport Connection Profile (retired) # only available if underlying TLS library supports 3DES +pa --profile-aes AES TLS Secure Transport Connection Profile (retired) +pn --profile-null Authenticated unencrypted communication (retired, was used in IHE ATNA) ciphersuite: +cc --list-ciphers list supported TLS ciphersuites and exit +cs --cipher [c]iphersuite name: string add ciphersuite to list of negotiated suites +dp --dhparam [f]ilename: string read DH parameters for DH/DSS ciphersuites server name indication: --no-sni do not use SNI (default) --expect-sni [s]erver name: string expect requests for server name s pseudo random generator: +rs --seed [f]ilename: string seed random generator with contents of f +ws --write-seed write back modified seed (only with --seed) +wf --write-seed-file [f]ilename: string (only with --seed) write modified seed to file f peer authentication: -rc --require-peer-cert verify peer certificate, fail if absent (default) -vc --verify-peer-cert verify peer certificate if present -ic --ignore-peer-cert don't verify peer certificate ``` ### output options ``` general: -rfp --request-file-path [p]ath: string path to store request files to -rff --request-file-format [f]ormat: string (default: #t.dump) request file name format ``` ## NOTES The semantic impacts of the above mentioned options is clear for the majority of options. Some particular options, however, are so specific that they need detailed descriptions which will be given in this passage. The returned character set options are intended for situations in which the **wlmscpfs** application will return attribute values which are not composed of characters from the DICOM default character repertoire. In such cases, for example option *--return-iso-ir-100* can be used to specify that a response to a modality's worklist management C-FIND request shall contain DICOM's Specific Character Set attribute (0008,0005) with a corresponding value, indicating the character repertoire from which the characters of returned attribute values were taken (in this example the repertoire ISO IR 100). Please note that the **wlmscpfs** application will not make sure that all returned values are actually made up of this character repertoire; the application expects this to be the case. In general, the Specific Character Set attribute (0008,0005) will only be included in the C-FIND response if it contains any attributes that are affected by the character set, i.e. for value representations PN, LO, LT, SH, ST and UT. Please note that a C-FIND request which is handled by this application may contain DICOM's Specific Character Set attribute (0008,0005), but this application will never use this attribute's value for matching. Besides, the question if DICOM's Specific Character Set attribute (0008,0005) will be contained in a C-FIND response which is returned by this application is always determined by the returned character set option which was specified when this application was started. The options --enable-file-reject and --disable-file-reject can be used to enable or disable a file rejection mechanism which makes sure only complete worklist files will be used during the matching process. A worklist file is considered to be complete if it contains all necessary type 1 information which the SCP might have to return to an SCU in a C-FIND response message. Table K.6-1 in part 4 annex K of the DICOM standard lists all corresponding type 1 attributes (see column "Return Key Type"). The called Application Entity Title from an incoming A-ASSOCIATE-RQ is used as a subdirectory name below the *--data-file-path* directory in order to look up the worklist files that this association may access. The DICOM VR AE (see DICOM PS3.5 Section 6.1.3) permits the characters "/" (forward slash) and "." (full stop), so a conformant peer can send an AE title such as "../OTHER" that would resolve to a sibling directory of the configured worklist root. To prevent this, **wlmscpfs** rejects any A-ASSOCIATE-RQ whose called AE title is not safe to use as a single filesystem path component. The set of accepted characters is letters, digits, space and the characters "-", ":", "@" and "\_"; any other byte (path separators "/" and "\\\\", NUL, control bytes, bytes outside the printable ASCII range, shell metacharacters as well as the dot character) causes the association to be rejected. Dots are rejected outright (rather than only the standalone components "." and "..") because real-world AE titles nevercontain dots and rejecting the entire character avoids any need to reasonabout platform-specific path normalization corner cases.@subsection wlmscpfs\_request\_files Writing Request FilesProviding option \\e --request-file-path enables writing of the incoming C-FINDrequests into text files. The option value provides the target directory wherethese files will be stored. All request files are stored in "dump" format asprovided by the \\b dcmdump tool and are raw, i.e. they are written as theyarrive at \\b wlmscpfs, without any tag processing applied by \\b wlmscpfs.Writing request files allows users to "interactively" prepare the worklistdatabase (for \\b wlmscpfs the worklist files served from the \\e --data-file-pathdirectory) by watching the request file directory. Once a request file appears,one needs some time to update worklist entries in the database. For thatreason it makes sense to use \\e --request-file-path in combination with option\\e --sleep-before which lets users specify a certain amount of seconds that\\b wlmscpfs should wait before actually starting to check the worklist database.Note that the request files written with \\e --data-file-path are notautomatically deleted by \\b wlmscpfs.If request files are enabled, \\b wlmscpfs must automatically create file nameswithin the given directory. By default, the format is \\\.dump where\\\ is in the format YYYYMMDDhhmmssffffff where:- YYYY is the current year- MM is the current month- DD is the current day- hh are the current hours (in 24 hour format)- mm are the current minutes- ss are the current seconds and- ffffff is the fraction of the current secondThis should work as a default for most applications that would like to userequest files and want to ensure unique file names. If it is desired to changethis naming scheme, the option \\e --request-file-format can be used. Itpermits one to specify the file naming pattern used by \\e --request-file-path.For flexibility, the following placeholders can be used in the pattern providedfor \\e --request-file-format:- \\#a: calling application entity title of the peer SCU- \\#c: called application entity title (AE title of worklist SCP application)- \\#i: process id of the worklist SCP application process handling the request- \\#p: patient ID if present, otherwise empty string- \\#t: timestamp in the format YYYYMMDDhhmmssffffffThe default (i.e. the value if \\e --request-file-format is not explicitly set)is \\#t.dump resulting in the timestamp format described above.An example for such a user-defined format string would be"request\_#i\_#a\_#c.txt". The \\#i makes most sense if \\b wlmscpfs multi-processmode is enabled via \\e --fork option in order to ensure that simultaneousrequest will not result in the same file name for both requests.It should be noted that the \\#p placeholder uses the value of Patient ID(0010,0020) from the request as is, i.e. if the string contains non-ASCIIcharacters, the file name computed by \\b wlmscpfs might be broken and thuscannot be written successfully or will look broken once written. Also, an emptyPatient ID is used as such, i.e. the \\#p will be replaced with an empty string.For security reasons, the values substituted for the placeholders \\#a, \\#c and\\#p are sanitized before they are inserted into the resulting file name: pathseparators ("/", "\\") and other characters that are not safe in a file namecomponent are replaced with the underscore character ("\_"). This preventsattacker-controlled values transmitted over the network (called/calling AEtitle, Patient ID) from escaping the configured request file directory.@subsection wlmscpfs\_dicom\_conformance DICOM ConformanceThe \\b wlmscpfs application supports the following SOP Classes as an SCP:@verbatim VerificationSOPClass 1.2.840.10008.1.1FINDModalityWorklistInformationModel 1.2.840.10008.5.1.4.31\\endverbatimThe \\b wlmscpfs application will accept presentation contexts for all of theabovementioned supported SOP Classes using any of the transfer syntaxes:@verbatim LittleEndianImplicitTransferSyntax 1.2.840.10008.1.2LittleEndianExplicitTransferSyntax 1.2.840.10008.1.2.1BigEndianExplicitTransferSyntax 1.2.840.10008.1.2.2\\endverbatimThe default behavior of the \\b wlmscpfs application is to prefer transfersyntaxes having an explicit encoding over the default implicit transfersyntax. If \\b wlmscpfs is running on big-endian hardware it will preferBigEndianExplicit to LittleEndianExplicit transfer syntax (and vice versa).This behavior can be changed with the \\e --prefer options (see above).If compiled with zlib support enabled (see \\e --version output) and ifoption \\e --prefer-deflated is used, also the following transfer syntaxis accepted.@verbatim DeflatedExplicitVRLittleEndianTransferSyntax 1.2.840.10008.1.2.1.99\\endverbatimThe \\b wlmscpfs application does not support extended negotiation.Currently, the \\b wlmscpfs application supports the following attributes asmatching keys:@verbatim (0008,0020) StudyDate(0008,0030) StudyTime(0008,0050) AccessionNumber(0008,0090) ReferringPhysicianName(0010,0010) PatientName(0010,0020) PatientID(0010,0021) IssuerOfPatientID(0010,0030) PatientBirthDate(0010,0040) PatientSex(0010,2201) PatientSpeciesDescription(0010,2202) PatientSpeciesCodeSequence (0008,0100) \> CodeValue (0008,0102) \> CodingSchemeDesignator (0008,0103) \> CodingSchemeVersion (0008,0104) \> CodeMeaning(0010,2203) PatientSexNeutered(0010,2292) PatientBreedDescription(0010,2293) PatientBreedCodeSequence (0008,0100) \> CodeValue (0008,0102) \> CodingSchemeDesignator (0008,0103) \> CodingSchemeVersion (0008,0104) \> CodeMeaning(0010,2294) BreedRegistrationSequence (0010,2295) \> BreedRegistrationNumber (0010,2296) \> BreedRegistryCodeSequence (0008,0100) \> \> CodeValue (0008,0102) \> \> CodingSchemeDesignator (0008,0103) \> \> CodingSchemeVersion (0008,0104) \> \> CodeMeaning(0010,2297) ResponsiblePerson(0010,2298) ResponsiblePersonRole(0010,2299) ResponsibleOrganization(0032,1032) RequestingPhysician(0038,0010) AdmissionID(0040,0100) ScheduledProcedureStepSequence (0008,0060) \> Modality (0040,0001) \> ScheduledStationAETitle (0040,0002) \> ScheduledProcedureStepStartDate (0040,0003) \> ScheduledProcedureStepStartTime (0040,0006) \> ScheduledPerformingPhysicianName(0040,1001) RequestedProcedureID(0040,1003) RequestedProcedurePriority\\endverbatimAs return keys the following attributes are currently supported by \\b wlmscpfs:@verbatim (0008,0020) StudyDate(0008,0030) StudyTime(0008,1030) StudyDescription(0008,0050) AccessionNumber(0008,0080) InstitutionName(0008,0081) InstitutionAddress(0008,1040) InstitutionalDepartmentName(0008,0090) ReferringPhysicianName(0008,0092) ReferringPhysicianAddress(0008,0082) InstitutionCodeSequence (0008,0100) \> CodeValue (0008,0102) \> CodingSchemeDesignator (0008,0103) \> CodingSchemeVersion (0008,0104) \> CodeMeaning(0008,1041) InstitutionalDepartmentTypeCodeSequence (0008,0100) \> CodeValue (0008,0102) \> CodingSchemeDesignator (0008,0103) \> CodingSchemeVersion (0008,0104) \> CodeMeaning(0008,1080) AdmittingDiagnosesDescription(0008,1110) ReferencedStudySequence (0008,1150) \> ReferencedSOPClassUID (0008,1155) \> ReferencedSOPInstanceUID(0008,1120) ReferencedPatientSequence (0008,1150) \> ReferencedSOPClassUID (0008,1155) \> ReferencedSOPInstanceUID(0010,0010) PatientName(0010,0020) PatientID(0010,0021) IssuerOfPatientID(0010,0030) PatientBirthDate(0010,1010) PatientAge(0010,0040) PatientSex(0010,1000) OtherPatientIDs (retired)(0010,1001) OtherPatientNames(0010,1020) PatientSize(0010,1030) PatientWeight(0010,2201) PatientSpeciesDescription(0010,2202) PatientSpeciesCodeSequence (0008,0100) \> CodeValue (0008,0102) \> CodingSchemeDesignator (0008,0103) \> CodingSchemeVersion (0008,0104) \> CodeMeaning(0010,2203) PatientSexNeutered(0010,2292) PatientBreedDescription(0010,2293) PatientBreedCodeSequence (0008,0100) \> CodeValue (0008,0102) \> CodingSchemeDesignator (0008,0103) \> CodingSchemeVersion (0008,0104) \> CodeMeaning(0010,2294) BreedRegistrationSequence (0010,2295) \> BreedRegistrationNumber (0010,2296) \> BreedRegistryCodeSequence (0008,0100) \> \> CodeValue (0008,0102) \> \> CodingSchemeDesignator (0008,0103) \> \> CodingSchemeVersion (0008,0104) \> \> CodeMeaning(0010,1040) PatientAddress(0010,1080) MilitaryRank(0010,2000) MedicalAlerts(0010,2110) ContrastAllergies(0010,2160) EthnicGroup (retired)(0010,21a0) SmokingStatus(0010,21b0) AdditionalPatientHistory(0010,21c0) PregnancyStatus(0010,21d0) LastMenstrualDate(0010,2297) ResponsiblePerson(0010,2298) ResponsiblePersonRole(0010,2299) ResponsibleOrganization(0010,4000) PatientComments(0020,000d) StudyInstanceUID(0032,1032) RequestingPhysician(0032,1033) RequestingService(0032,1060) RequestedProcedureDescription(0032,1064) RequestedProcedureCodeSequence (0008,0100) \> CodeValue (0008,0102) \> CodingSchemeDesignator (0008,0103) \> CodingSchemeVersion (0008,0104) \> CodeMeaning(0038,0010) AdmissionID(0038,0011) IssuerOfAdmissionID(0038,0050) SpecialNeeds(0038,0300) CurrentPatientLocation(0038,0500) PatientState(0040,0100) ScheduledProcedureStepSequence (0008,0060) \> Modality (0032,1070) \> RequestedContrastAgent (0040,0001) \> ScheduledStationAETitle (0040,0002) \> ScheduledProcedureStepStartDate (0040,0003) \> ScheduledProcedureStepStartTime (0040,0004) \> ScheduledProcedureStepEndDate (0040,0005) \> ScheduledProcedureStepEndTime (0040,0006) \> ScheduledPerformingPhysicianName (0040,0007) \> ScheduledProcedureStepDescription (0040,0008) \> ScheduledProtocolCodeSequence (0008,0100) \> \> CodeValue (0008,0102) \> \> CodingSchemeDesignator (0008,0103) \> \> CodingSchemeVersion (0008,0104) \> \> CodeMeaning (0040,0009) \> ScheduledProcedureStepID (0040,0010) \> ScheduledStationName (0040,0011) \> ScheduledProcedureStepLocation (0040,0012) \> PreMedication (0040,0020) \> ScheduledProcedureStepStatus (0040,0400) \> CommentsOnTheScheduledProcedureStep(0040,1001) RequestedProcedureID(0040,1002) ReasonForTheRequestedProcedure(0040,1003) RequestedProcedurePriority(0040,1004) PatientTransportArrangements(0040,1005) RequestedProcedureLocation(0040,1008) ConfidentialityCode(0040,1009) ReportingPriority(0040,1010) NamesOfIntendedRecipientsOfResults(0040,1400) RequestedProcedureComments(0040,2001) ReasonForTheImagingServiceRequest(0040,2004) IssueDateOfImagingServiceRequest(0040,2005) IssueTimeOfImagingServiceRequest(0040,2008) OrderEnteredBy(0040,2009) OrderEnterersLocation(0040,2010) OrderCallbackPhoneNumber(0040,2016) PlacerOrderNumberImagingServiceRequest(0040,2017) FillerOrderNumberImagingServiceRequest(0040,2400) ImagingServiceRequestComments(0040,3001) ConfidentialityConstraintOnPatientDataDescription\\endverbatimThe attribute (0008,0005) SpecificCharacterSet is a special case and itssupport by \\b wlmscpfs is discussed in the NOTES section above.Note that if the return key attribute (0010,21c0) PregnancyStatus isrequested but not contained in a worklist file, it is returned with value 4("unknown") instead of an empty value.The option \\e --enable-all-return can be used to lift the above restrictionon the set of supported return key attributes: any other non-sequenceattribute on the main level of the query is then also accepted as a returnkey attribute and filled with the value found in the matching worklist file,or returned with an empty value if the worklist file does not contain theattribute. Such attributes consequently no longer cause the C-FIND responsestatus "Pending with warning" to be returned. Sequence attributes as wellas attributes within sequences are not affected by this option.@subsection wlmscpfs\_access\_control Access ControlWhen compiled on Unix platforms with TCP wrapper support, host-based accesscontrol can be enabled with the \\e --access-control command line option. Inthis case the access control rules defined in the system's host access controltables for \\b wlmscpfs are enforced. The default locations of the host accesscontrol tables are \/etc/hosts.allow\ and \/etc/hosts.deny\.Further details are described in \hosts\_access\(5).@section wlmscpfs\_logging LOGGINGThe level of logging output of the various command line tools and underlyinglibraries can be specified by the user. By default, only errors and warningsare written to the standard error stream. Using option \\e --verbose alsoinformational messages like processing details are reported. Option\\e --debug can be used to get more details on the internal activity, e.g. fordebugging purposes. Other logging levels can be selected using option\\e --log-level. In \\e --quiet mode only fatal errors are reported. In suchvery severe error events, the application will usually terminate. For moredetails on the different logging levels, see documentation of module "oflog".In case the logging output should be written to file (optionally with logfilerotation), to syslog (Unix) or the event log (Windows) option \\e --log-configcan be used. This configuration file also allows for directing only certainmessages to a particular output stream and for filtering certain messagesbased on the module or application where they are generated. An exampleconfiguration file is provided in \\\\/logger.cfg\.@section wlmscpfs\_command\_line COMMAND LINEAll command line tools use the following notation for parameters: squarebrackets enclose optional values (0-1), three trailing dots indicate thatmultiple values are allowed (1-n), a combination of both means 0 to n values.Command line options are distinguished from parameters by a leading '+' or '-'sign, respectively. Usually, order and position of command line options arearbitrary (i.e. they can appear anywhere). However, if options are mutuallyexclusive the rightmost appearance is used. This behavior conforms to thestandard evaluation rules of common Unix shells.In addition, one or more command files can be specified using an '@' sign as aprefix to the filename (e.g. \\\@command.txt\). Such a command argumentis replaced by the content of the corresponding text file (multiplewhitespaces are treated as a single separator unless they appear between twoquotation marks) prior to any further evaluation. Please note that a commandfile cannot contain another command file. This simple but effective approachallows one to summarize common combinations of options/parameters and avoidslongish and confusing command lines (an example is provided in file\\\\/dumppat.txt\).@section wlmscpfs\_environment ENVIRONMENTThe \\b wlmscpfs utility will attempt to load DICOM data dictionaries specifiedin the \\e DCMDICTPATH environment variable. By default, i.e. if the\\e DCMDICTPATH environment variable is not set, the file\\\\/dicom.dic\ will be loaded unless the dictionary is builtinto the application (default for Windows).The default behavior should be preferred and the \\e DCMDICTPATH environmentvariable only used when alternative data dictionaries are required. The\\e DCMDICTPATH environment variable has the same format as the Unix shell\\e PATH variable in that a colon (":") separates entries. On Windows systems,a semicolon (";") is used as a separator. The data dictionary code will attempt to load each file specified in the *DCMDICTPATH* environment variable. It is an error if no data dictionary can be loaded. ## COPYRIGHT Copyright (C) 1996-2026 by OFFIS e.V., Escherweg 2, 26121 Oldenburg, Germany.