$dcmtk: echoscu v3.7.1 2026-10-15 $
echoscu: DICOM verification (C-ECHO) SCU
usage: echoscu [options] peer port
parameters:
peer hostname of DICOM peer
port tcp/ip port number of peer
general options:
-h --help print this help text and exit
--version print version information and exit
--arguments print expanded command line arguments
-q --quiet quiet mode, print no warnings and errors
-v --verbose verbose mode, print processing details
-d --debug debug mode, print debug information
-ll --log-level [l]evel: string constant
(fatal, error, warn, info, debug, trace)
use level l for the logger
-lc --log-config [f]ilename: string
use config file f for the logger
network options:
IP protocol version:
-i4 --ipv4 use IPv4 only (default)
-i6 --ipv6 use IPv6 only
-i0 --ip-auto use DNS lookup to determine IP protocol
application entity titles:
-aet --aetitle [a]etitle: string
set my calling AE title (default: ECHOSCU)
-aec --call [a]etitle: string
set called AE title of peer (default: ANY-SCP)
association negotiation debugging:
-pts --propose-ts [n]umber: integer (1..53)
propose n transfer syntaxes
-ppc --propose-pc [n]umber: integer (1..128)
propose n presentation contexts
other network options:
-to --timeout [s]econds: integer (default: unlimited)
timeout for connection requests
-ts --socket-timeout [s]econds: integer (default: 60)
timeout for network socket (0 for none)
-ta --acse-timeout [s]econds: integer (default: 30)
timeout for ACSE messages
-td --dimse-timeout [s]econds: integer (default: unlimited)
timeout for DIMSE messages
-pdu --max-pdu [n]umber of bytes: integer (4096..131072)
set max receive pdu to n bytes (default: 16384)
--repeat [n]umber: integer
repeat n times
--abort abort association instead of releasing it
transport layer security (TLS) options:
transport protocol stack:
-tls --disable-tls use normal TCP/IP connection (default)
+tls --enable-tls [p]rivate key file, [c]ertificate file: string
use authenticated secure TLS connection
+tla --anonymous-tls use secure TLS connection without certificate
private key password (only with --enable-tls):
+ps --std-passwd prompt user to type password on stdin (default)
+pw --use-passwd [p]assword: string
use specified password
-pw --null-passwd use empty string as password
key and certificate file format:
-pem --pem-keys read keys and certs as PEM file (default)
-der --der-keys read keys and certificates as DER file
certification authority:
+cf --add-cert-file [f]ilename: string
add certificate file to list of certificates
+cd --add-cert-dir [d]irectory: string
add certificates in d to list of certificates
+crl --add-crl-file [f]ilename: string
add certificate revocation list file
(implies --enable-crl-vfy)
+crv --enable-crl-vfy enable leaf CRL verification
+cra --enable-crl-all enable full chain CRL verification
security profile:
+ph --list-profiles list supported TLS profiles and exit
+pg --profile-8996 BCP 195 RFC 8996 TLS Profile (default)
+pm --profile-8996-mod Modified BCP 195 RFC 8996 TLS Profile
+py --profile-bcp195-nd Non-downgrading BCP 195 TLS Profile (retired)
+px --profile-bcp195 BCP 195 TLS Profile (retired)
+pz --profile-bcp195-ex Extended BCP 195 TLS Profile (retired)
+pa --profile-aes AES TLS Secure Transport Connection Profile
(retired)
ciphersuite:
+cc --list-ciphers list supported TLS ciphersuites and exit
+cs --cipher [c]iphersuite name: string
add ciphersuite to list of negotiated suites
(not with --profile-bcp195-ex)
server name indication:
--no-sni do not use SNI (default)
--request-sni [s]erver name: string
request server name s
pseudo random generator:
+rs --seed [f]ilename: string
seed random generator with contents of f
+ws --write-seed write back modified seed (only with --seed)
+wf --write-seed-file [f]ilename: string (only with --seed)
write modified seed to file f
peer authentication:
-rc --require-peer-cert verify peer cert, fail if absent (default)
-ic --ignore-peer-cert don't verify peer certificate
offline certificate verification:
+vc --verify-cert [f]ilename: string
verify certificate against CA settings
+rc --is-root-cert [f]ilename: string
check if certificate is self-signed root CA
Options (30)
| Option | Description | Source |
|---|---|---|
-h | --help print this help text and exit | help |
--version | print version information and exit | help |
--arguments | print expanded command line arguments | help |
-q | --quiet quiet mode, print no warnings and errors | help |
-v | --verbose verbose mode, print processing details | help |
-d | --debug debug mode, print debug information | help |
-ll | --log-level [l]evel: string constant (fatal, error, warn, info, debug, trace) use level l for the logger | help |
-lc | --log-config [f]ilename: string use config file f for the logger | help |
-i4 | --ipv4 use IPv4 only (default) | help |
-i6 | --ipv6 use IPv6 only | help |
-i0 | --ip-auto use DNS lookup to determine IP protocol | help |
-aet | --aetitle [a]etitle: string set my calling AE title (default: ECHOSCU) | help |
-aec | --call [a]etitle: string set called AE title of peer (default: ANY-SCP) | help |
-pts | --propose-ts [n]umber: integer (1..53) propose n transfer syntaxes | help |
-ppc | --propose-pc [n]umber: integer (1..128) propose n presentation contexts | help |
-to | --timeout [s]econds: integer (default: unlimited) timeout for connection requests | help |
-ts | --socket-timeout [s]econds: integer (default: 60) timeout for network socket (0 for none) | help |
-ta | --acse-timeout [s]econds: integer (default: 30) timeout for ACSE messages | help |
-td | --dimse-timeout [s]econds: integer (default: unlimited) timeout for DIMSE messages | help |
-pdu | --max-pdu [n]umber of bytes: integer (4096..131072) set max receive pdu to n bytes (default: 16384) | help |
--repeat | [n]umber: integer repeat n times | help |
--abort | abort association instead of releasing it | help |
-tls | --disable-tls use normal TCP/IP connection (default) | help |
-pw | --null-passwd use empty string as password | help |
-pem | --pem-keys read keys and certs as PEM file (default) | help |
-der | --der-keys read keys and certificates as DER file | help |
--no-sni | do not use SNI (default) | help |
--request-sni | [s]erver name: string request server name s | help |
-rc | --require-peer-cert verify peer cert, fail if absent (default) | help |
-ic | --ignore-peer-cert don't verify peer certificate | help |