$dcmtk: echoscu v3.7.1 2026-10-15 $

echoscu: DICOM verification (C-ECHO) SCU
usage: echoscu [options] peer port

parameters:
  peer                         hostname of DICOM peer
  port                         tcp/ip port number of peer

general options:
  -h      --help               print this help text and exit
          --version            print version information and exit
          --arguments          print expanded command line arguments
  -q      --quiet              quiet mode, print no warnings and errors
  -v      --verbose            verbose mode, print processing details
  -d      --debug              debug mode, print debug information
  -ll     --log-level          [l]evel: string constant
                               (fatal, error, warn, info, debug, trace)
                               use level l for the logger
  -lc     --log-config         [f]ilename: string
                               use config file f for the logger
network options:
  IP protocol version:
    -i4   --ipv4               use IPv4 only (default)
    -i6   --ipv6               use IPv6 only
    -i0   --ip-auto            use DNS lookup to determine IP protocol
  application entity titles:
    -aet  --aetitle            [a]etitle: string
                               set my calling AE title (default: ECHOSCU)
    -aec  --call               [a]etitle: string
                               set called AE title of peer (default: ANY-SCP)
  association negotiation debugging:
    -pts  --propose-ts         [n]umber: integer (1..53)
                               propose n transfer syntaxes
    -ppc  --propose-pc         [n]umber: integer (1..128)
                               propose n presentation contexts
  other network options:
    -to   --timeout            [s]econds: integer (default: unlimited)
                               timeout for connection requests
    -ts   --socket-timeout     [s]econds: integer (default: 60)
                               timeout for network socket (0 for none)
    -ta   --acse-timeout       [s]econds: integer (default: 30)
                               timeout for ACSE messages
    -td   --dimse-timeout      [s]econds: integer (default: unlimited)
                               timeout for DIMSE messages
    -pdu  --max-pdu            [n]umber of bytes: integer (4096..131072)
                               set max receive pdu to n bytes (default: 16384)
          --repeat             [n]umber: integer
                               repeat n times
          --abort              abort association instead of releasing it
transport layer security (TLS) options:
  transport protocol stack:
    -tls  --disable-tls        use normal TCP/IP connection (default)
    +tls  --enable-tls         [p]rivate key file, [c]ertificate file: string
                               use authenticated secure TLS connection
    +tla  --anonymous-tls      use secure TLS connection without certificate
  private key password (only with --enable-tls):
    +ps   --std-passwd         prompt user to type password on stdin (default)
    +pw   --use-passwd         [p]assword: string
                               use specified password
    -pw   --null-passwd        use empty string as password
  key and certificate file format:
    -pem  --pem-keys           read keys and certs as PEM file (default)
    -der  --der-keys           read keys and certificates as DER file
  certification authority:
    +cf   --add-cert-file      [f]ilename: string
                               add certificate file to list of certificates
    +cd   --add-cert-dir       [d]irectory: string
                               add certificates in d to list of certificates
    +crl  --add-crl-file       [f]ilename: string
                               add certificate revocation list file
                               (implies --enable-crl-vfy)
    +crv  --enable-crl-vfy     enable leaf CRL verification
    +cra  --enable-crl-all     enable full chain CRL verification
  security profile:
    +ph   --list-profiles      list supported TLS profiles and exit
    +pg   --profile-8996       BCP 195 RFC 8996 TLS Profile (default)
    +pm   --profile-8996-mod   Modified BCP 195 RFC 8996 TLS Profile
    +py   --profile-bcp195-nd  Non-downgrading BCP 195 TLS Profile (retired)
    +px   --profile-bcp195     BCP 195 TLS Profile (retired)
    +pz   --profile-bcp195-ex  Extended BCP 195 TLS Profile (retired)
    +pa   --profile-aes        AES TLS Secure Transport Connection Profile
                               (retired)
  ciphersuite:
    +cc   --list-ciphers       list supported TLS ciphersuites and exit
    +cs   --cipher             [c]iphersuite name: string
                               add ciphersuite to list of negotiated suites
                               (not with --profile-bcp195-ex)
  server name indication:
          --no-sni             do not use SNI (default)
          --request-sni        [s]erver name: string
                               request server name s
  pseudo random generator:
    +rs   --seed               [f]ilename: string
                               seed random generator with contents of f
    +ws   --write-seed         write back modified seed (only with --seed)
    +wf   --write-seed-file    [f]ilename: string (only with --seed)
                               write modified seed to file f
  peer authentication:
    -rc   --require-peer-cert  verify peer cert, fail if absent (default)
    -ic   --ignore-peer-cert   don't verify peer certificate
  offline certificate verification:
    +vc   --verify-cert        [f]ilename: string
                               verify certificate against CA settings
    +rc   --is-root-cert       [f]ilename: string
                               check if certificate is self-signed root CA