Home

Manual of the DICOM Detective Enterprise

1. 2 Ifthe user wants to replace element already exist the Replace If Exist should be checked Otherwise if an element already exists the element would not be inserted 3 The Tag field is an auto complete field It means user can enter parts of the tag or tag name system would list up tags that match what entered E g user enters sequence and then all tag that relates to sequence would be listed up 4 Following rules applies to the value field a Use backslash to separate multi value regardless VR e g 1 012 1 for FD Float Double type element b When the VR is UI and the value field is GENERATE UID DICOM Detective would generate an UID to fill the value c When the VR is OB or OW or OF or UN and the value field is filled with an existing file name the binary content of the file would be filled to the value Otherwise the string in the value field would be converted to binary to be filled into the value 13 DICOM d If the value is hex number add prefix Ox e g Oxlef3 Only apply to UL US SS SL elements e For AT element do not add prefix Ox E g 7feQ00010V fe0001 1 4 2 1 7 Edit gt Delete When a DICOM or a capture file is opened you can delete DICOM elements When this menu is selected The menu is only active when an element is selected The menu can also be popped up by right clicking the selected element the selected element would be deleted 4 2 1 8 Edit gt Reload gt When
2. 28 DICOM Result list displays the files searched User can add column to the list by providing the DICOM tag that user wants to display The Open button opens files selected in the result list using DICOM file view The Open Image button opens files selected in the result list using DICOM image viewer The Open SR button opens files selected in the result list using DICOM SR viewer The To Clipboard button copies the selected items in the result list to the clipboard User can add columns to the result list It will display the first element that has same tag with the column Type tag or name in the Tag dropdown box would list all elements matched to the word typed X and x are deemed as wildcards for tag x can be used for criteria e g 60xx0010 4 2 2 Detail of 5 views 4 2 2 1 PDU View Figure 31 is a sample of PDU view PDU view lists PDU details with a tree list Notes e IP and port of communication peers are showed in the status bar e The arrows in the Direction column present the data direction E g for Figure 31 Right Green arrow indicates that the data was sent from 192 168 0 150 32882 to 192 168 0 230 1024 e Error column displays analysis errors DICOM verify warnings and errors e For user s convenience the number is displayed in both decimal and hex format e For long hex data user can click the button to open a hex view to display the full hex data User can als
3. Presentation Data Value 13 gt Item Length g4 54H gt S Presentation Context ID 13 DH TT i SE Message Header 3 Command Set Last Fragment Hex View i Command Data Set 0000000004000000460000000000020016000000312ZE322E3034 Ty Button FH P DATA TF 104 187 285913 104 1 04000000000E000000080D02FEFFEDE000000000 gt No enough A RELEASE RO 160 196 938052 16 05000000000400000000 P gt PDU Type SSH Reserved D P PDU Length 4 4H P Reserved 00000000 SE EH 4 RELEASE RP 161 196 938174 16 06000000000400000000 a 4 ej IP Address 192 168 0 150 Port 132882 de G IP Address 192 168 0 230 Port 1024 ee Figure 31 Sample of PDU View 30 DICOM a gt Manual of the DICOM Detective Enterprise 4 2 2 2 JO xi Eee use eae weet la 2 540 1000 OG o 5 1 74 OG eee ee 1 2 84 Exit Save Figure 32 Hex Data View ox Basic Grayscale Print Management Meta SOP Class Explicit VA Little Endian Figure 33 Text Data View Service Element View Figure 35 Figure 36 and Figure 37 are samples of service element view Notes Error column displays analysis errors DICOM verify warnings and errors Packet number and time is displayed for every service element format is same as what in PDU view Values are displayed in the content column just beside the DICOM tag In different cases of DICOM communication e g explicitimplicit VR transfer syntax
4. 0000009AH Group 0000 Length 0000 0002 UI 28 1 1 1 2 840 10008 5 1 4 1 1 6 1 Ultrasound Image Storage Affected SOP Class UID 0000 0100 US 2 1 1 8001H C STORE RSP Command Field 0000 0120 US 2 1 1 12 000CH Message ID Being Responded To 0000 0800 US 2 1 1 0101H No Data Set is Present Data Set Type 0000 0900 US 2 1 1 45056 BO00H Status 0000 0902 LO 22 1 1 set StudyID to lt null gt Error Comment 0000 1000 UD 40 1 1 1 2 840 146759 7 119 1 1064606707 0 66 4 Affected SOP Instance UID 192 168 10 1 1083 gt gt A ASSOCIATE RQ gt gt 192 168 10 2 5104 192 168 10 1 1083 lt lt A ASSOCIATE RP lt lt 192 168 10 2 5104 49
5. 4 2 1 19 Tools gt Find and Find Next X m Find Element Find Next Bytag 00000110 C By name Close Value Find Any Test I Match case C By text Match whole word Figure 29 Find Dialog User can find DICOM data element in the Service Element view and DICOM File view by entering the element tag name and value as search criteria in the Find dialog showed in Figure 29 User can also find any text displayed in the Service Element view and DICOM File view Besides using menu find dialog can also be started by the accelerate key Ctrl F and user can continue the search by the accelerate key F3 4 2 1 20 Tools gt Find DICOM Files 26 DICOM M l Manual of the DICOM Detective Enterprise x User wildcard to filter out non DICOM files non DICOM files may cause unexpected result Look in F capfile export sr dem a Criteria Name Tag ae ooo Patient s Name 00100010 Cancel Modality 00080060 SR Match case Tag 00080060 CS Modality v Tiaras ore Tag format ggggeeee e g 00100010 x is wildcard Value SR Add Update Delete Use 1 to seperate mutiple criteria to specify range e g 20070225 20080225120080506 for 0018 1200 Date of Last Calibration that has YR of DA and Value Multiplicity of 1 n Result File Patient s Name Modality open F capfile export srireportO1 dcm Osterman Phillip B SR F lcapfil
6. 8 7 72000 32 8 773000 Basic Grayscale Print M N SET RO 33 6 774000 358 9 144000 Basic Grayscale Print gt H Command Set total 6 gt Figure 35 Sample 1 of Service Element View 32 Data Set total 3 hj E i2020 0010 Image Box Position USUS 1 0001H gt 2020 0020 Polarity c5 cs NORMAL 2020 0110 Basic Grayscale Image Sequence 50050 be Length 307310 4B06EH E VR Sor co MM 161 Sequence of Items I FFFE E000 Item I Length 307302 4B066H gt MM 1417 El Sequence Item H i0028 0002 Samples per Pixel US US 1 0001H G 0028 0004 Photometric Interpretation CS CS MONOCHROMEZ gt 0028 0010 Rows USUS 480 01E0H gt es Length Z 2H gt DMR USUS gt MM iti Value 480 01EQH gt i 0028 0011 Columns USUS 640 0280H gt 0028 0100 Bits Allocated USUS 8 0008H l 0028 0101 Bits Stored USUS 8 0008H 4 0028 0102 High Bit US US 7 0007H DICOM image i H 0028 0103 Pixel Representation USUS 0 0000H El 7FED 0010 Pixel Data CM OW OB ia viewer button a Length 307200 4B000H gt Be YR CW OW OB A MM iD DICOM image Value 2E1515151515151515 p viewer button 2 N SET RSP 359 9 2 18000 361 9 390000 Basic Gravscale Print i q H M SET RO 362 9 390000 693 9 545000 Basic Grayscale Print M gt M SET RSP 6
7. ADVANCED USAGE OF EXPORT AND IMPORT FUNCTION esoovnvvvvnevnevnvnnenernenn 43 CASE 4 USAGE OF JOINT CONNECTION AND RUN SCU PROCESS ervvvnvvnvnevnvrnennenennenn 44 APPENDIX B REPORT SAMPLE ccccccccccccccccccccccccccccccccccccccccccccccces 47 ii DICOM 1 OVERVIEW 1 1 Intended Audience and User The reader of this document is concerned with DICOM product service and DICOM software source codes tracing and debugging It is assumed that the reader of this document is familiar with the DICOM v3 0 standard The obvious users of the software described in this menu are DICOM service man programmer and consultant 1 2 Scope and Purpose This document presents the DICOM Detective It describes how to use the supported network protocol analyzers with the DICOM Detective it also describes the installation and usage of the DICOM Detective and serves as a user s menu 1 3 Terminology Following Terms are used in this document ASCH American Standard Code for Information Interchange ACSE Association Control Service Element AE Application Entity C ECHO The C ECHO service is invoked by a DIMSE service user to verify end to end communications with a peer DIMSE service user It is a confirmed service C MOVE The C MOVE service is used by a DIMSE service user to match a set of Attributes against the Attributes of a set of composite SOP Instances maintained by a peer DIMSE service user and retrieve all composite S
8. Default Transfer Syntax for DIC eal C STORE RQ 331 0 308412 482 0 MR Image Storage Implicit YR Little Endian Default Transfer Syntax for DIC aad gt C STORE RSP 484 0 398733 484 0 MR Image Storage Implicit VR Little Endian Default Transfer Syntax for DIC sell 4 RELEASE RQ 485 0 399020 485 05000000000400000000 gt RELEASE RP 486 0 470720 486 06000000000400000000 pen viewer button Tag 0009 0000 Save Dataset button E IP Address 192 168 8 2 Port 1040 p IP Address 192 168 8 32 Port 04 pr Figure 36 Sample 2 of Service Element View e When a data set contains a pixel data element 7FEO 0010 a B button will be attached to the data set and the pixel data element User can click the button to start the DICOM image viewer to view the image contained in the data set This 1s special convenient for user to see what images are sent for DICOM storage and DICOM print DICOMDetective F capfile srreal cap 2 Oj x File F Data D Tools T indows W Help H 8 x T bean ai PDU Service element Simulator SCU Simulator SCP Eu eee ee 05 Erc H A ASSOCIATE RO 63 385 8 898091 63 5 8 898091 0100000000F90001000049404147455F5345525645 0204 Ei gt sl A ASSOCIATE AC 6391 13 422587 6393 13 598822 02000000008800010000494D4147455F534552564552202020204 f SR viewer I C STORE RQ 6394 13 603077 6453 1
9. transmission rate etc while DICOM transferring Show transmission rates dynamically in tables and a line chart Show network interface status dynamically Records DICOM network transmission rates in history files and show the history of transmission rates in line chart Command line for exporting txt DVT script and MergeDPM User Info DICOM TABLE OF CONTENTS TABLE OF CONTENTS sac ties teecchatacieenvexcwensaivetwateccctmcaesbdaceseuncacountieassavesacoseeencietietics I L MENN 4 1 1 1 INTENDED AUDIENCE AND USER eerorvervevesnerennnrnenenvevnvnvrresenvervvsvevsrevssnnnnenenrere l L COPE AND hv l TRINN l 2 SYSTEM REQUIREMENTS sssrin aaas aaan anaa 2 gt OMNIA Na 3 4 DICOM DETECTIVE USER S MANUAL eesssssssssssssssssssssssssssvsssssssssssssnssssssnnee 5 4 1 DICOM DETECTIVE FUNCTIONALITY OVERVIEW rrnnnnvnvrnrrrrrnrnnnnnnnnvnvvnsersrsen 5 4 1 1 Pl 6 4 1 2 Service Llements NV Ne 7 4 1 3 Per 8 4 1 4 SOLE LT EEE E 9 4 1 5 SNE JE OE 9 42 DICOM DETECTIVE USER INTERFACE sseceececcececccececeeeeeeseeeenseneneees 10 4 2 1 Vs sn 10 4 2 1 1 File gt Open a Capture File Er ons ccecsceccssecssecsssecssecsssecssecssescnsecsasssnsees 10 4 2 1 2 File gt Open a Dicom File 12 4 2 1 3 File gt Save Only active when a DICOM file is opened 12 4 2 1 4 File gt Save As Only active when a DICOM file is opened 12 GJE gt LOGS EE NE 12 2216 BE NS CEG eee RRS asc Seca ncn temp DENS NEP SEEGER A AT S
10. 13 Following functions added e Added VR column l April 2009 Release 1 14 Following functions added a e Undefined length is calculated and displayed 2 00 June 2009 Release 2 00 Following functions added e New file format supported Accenlent 5views capture Wireshark nanosecond libpcap Wireshark big endian libpcap Inserting Deleting Editing DICOM elements include sequence elements for DICOM file and save it DICOM M l Manual of the DICOM Detective Enterprise Inserting Deleting Editing DICOM elements include sequence elements for capture file and save it Statistics Views for capture file to show data transmission rate patient transmission rate study transmission rate series transmission rate image transmission rate and frame transmission rate etc Time display format selection Sec since beginning of capture YY Y MM DD HH MM SS M and Sec since Epoch 1970 01 01 for capture file Option to open capture file directly if only one connection Option to skip error message while opening capture file Supports WinPcap packets Capture analyzes data while capturing Dynamic Analyze Support remote capture of WinPcap Support Gateway Capture for devices that cannot install capturing software Dynamic dump DICOM info to text file while DICOM transferring Dynamic gathering data transmission rate patient transmission rate study transmission rate series transmission rate image transmission rate and frame
11. Command Data Set H P DATA TF 11 3 498301 13 3 616 E P DATA TF 15 3 675347 17 4 016 PDL Type Reserved PDU Length Presentation Data value Ibems Tot EP Presentation Data value 3 CI P DATA TF 18 4 017437 18 4 017 H P DATA TF 20 4 016134 20 4 015 04000000008600000082030300000000040000007 gt 44H 00 134 86H 128 bytes Command Set Last Fragment 130082H 33H 3 Command Set Last Fragment NO000000040000007400000000000300160000005 040000000076000000720303000000000 40000006 0400000000220000001E035021021 1000435306004 4 4H oo 34 22H 26 bytes Data Set Last Fragment 30 1EH 1021 1000435306004E4F524D4 140102120004353 el 040000000058000000540303000000000 40000004 gt 04000000005400000050030200201 00049530200 F By IP Address 192 166 1 4 Port 1026 q E IP Address 192 168 1 60 Port 1 7 4 1 2 Service Elements View Figure 9 PDU View In the Service Elements view the DICOM ACSES association control service elements and DIMSES DICOM message service elements are shown in a treelist for both the requesting application and accepting application in time sequence The ACSE message contains data controlling the communication DICOM Detective shows the details of the ACSE by a tree list Every DIMSE message contains a Command Set with Command Elements and or a Data Set with Data Elements DICOM Detective s
12. FD 8 1 1 0 037225 Physical Delta X 0018 602E FD FD 8 1 1 0 037225 Physical Delta Y 0018 6030 UL UL 4 1 1 3750 00000EA6H Transducer Frequency 0020 000D UKUD 38 1 1 1 2 840 146759 7 119 1 1064606707 0 64 Study Instance UID 0020 000E UKUD 38 1 1 1 2 840 146759 7 119 1 1064606707 0 65 Series Instance UID 0020 0010 SH SH 0 0 1 Study ID 0020 0011 ISIS 4 1 1 0001 Series Number 0020 0013 ISIS 4 1 1 0001 Instance Number 0020 0020 CS CS 0 0 2 Patient Orientation 0028 0002 US US 2 1 1 1 0001H Samples per Pixel DICOM 0028 0004 CS CS 12 1 1 MONOCHROME2 Photometric Interpretation 0028 0006 US US 2 1 1 0 0000H Planar Configuration 0028 0010 US US 2 1 1 480 01 E0H Rows 0028 0011 US US 2 1 1 640 0280H Columns 0028 0100 US US 2 1 1 8 0008 H Bits Allocated 0028 0101 US US 2 1 1 8 0008 H Bits Stored 0028 0102 US US 2 1 1 7 0007H High Bit 0028 0103 US US 2 1 1 0 0000H Pixel Representation 0028 1050 DS DS 4 1 1 n 127 Window Center 0028 1051 DS DS 4 1 1 n 256 Window Width 0028 2110 CS CS 2 1 1 00 Lossy Image Compression 7FEO0 0010 OB OW OB 307200 1 1 1 2E151515151515151515151515151515151515151515151515151515151515151515151515151515 Pixel Data 192 168 10 1 1083 lt lt C STORE RSP Ultrasound Image Storage Explicit VR Little Endian lt lt 192 168 10 2 5104 Command Set total 8 0000 0000 UL 4 1 154
13. MOVE Select O _ that is created in the first step from the Group combo box ee Fifth start the SCP daemon by clicking the Start button in the Simulator SCP view of connection 1 Then the DICOM Detective SCP simulator starts to listen to the port Sixth you should make preparation for the image viewer 1 You should set break points and start your image viewer use same version and same setting with the debug mode 2 Do exact operation sequence that was done in the customer site to retrieve image from the DICOM Detective simulator SCP Then the DICOM Detective simulator SCP begins to interact with your image viewer It will start to send image C ECHO and C STORE using the SCU simulator during the C MOVE process Your image viewer will stop at the break point after the DICOM Detective sends the image to you image viewer if you set the break point at the right place you can trace and debug you source codes 46 DICOM Hare Manual of the DICOM Detective Enterprise Appendix B Report Sample 192 168 10 1 1083 gt gt A ASSOCIATE RQ gt gt 192 168 10 2 5104 Called Ap Title IMAGE_SERVER Calling Ap Title RADDEM 000000 Application Context 1 2 840 10008 3 1 1 1 DICOM Application Context Name Presentation Context ID 1 SOP Classs 1 2 840 10008 5 1 4 1 1 7 Secondary Capture Image Storage Transfer Syntax Proposed 1 2 840 10008 1 2 1 Explicit VR Little Endian Transfer Syntax Proposed 1 2 840 10008 1 2 2 Ex
14. Referenced SOP Instance UID 0008 1155 inside Referenced Image Box Sequence 2010 0510 using binary editor to edit the communication data sent by the CT Because these two UIDs are going to be created by your print server you know what UIDs should be set to the raw communication data If you changed the length of these two UIDs you should also modify the element length group length PDV length and PDU length After modification you can import the modified data into the DICOM Detective Then you can trace and debug your print server using the similar procedures described in Case I Case 4 Usage of Joint Connection and Run SCU process Suppose that your DICOM image viewer could not function well with a third part DICOM archive server in a customer s site 1000 kilometers away You could not travel to the customer s site in short time to solve the problem Then a service man there captured the DICOM communication by Sniffer Pro 4 5 and sent you the network capture file You opened the capture file with the DICOM Detective and checked the DICOM communication detail between the third part DICOM archive server and your image viewer You found that the communication is like below Connection 1 The image viewer send C ECHO to the archive server to verify the network for retrieving image Image viewer gt gt A ASSOCIATE RQ gt gt The third part DICOM archive server Image viewer lt lt A ASSOCIATE AC lt lt The third part DICOM archi
15. The lateral collateral ligament in intact The anterior cruciate ligament is irregular and slightly lax suggesting a partial tear It does not appear to be completely torn The posterior cruciate ligament is intact The suprapatellar tendons are normal Finding There is a tear of the posterior limb of the medial meniscus which communicates with the superior articular surface The lateral meniscus is intact There is a Baker s cyst and moderate joint effusion Finding Internal derangement of the right knee with marked injury and with partial tear of the ACL there is a tear of the posterior limb of the medial meniscus There is a Baker s Cyst and joint effusion and intrasubstance injury to the medial collateral ligament Best illustration of finding Image MR Image Storage SOP instance UID 2 26 840 2 223662 4 879682 8069642 80602 0667 2743 5067 8564784069 Current Requested Procedure Evidence Een Figure 38 Sample of SR Viewer 4 2 2 2 1 Editing Element User can insert and delete elements in the Service Element View Please refer 4 2 1 6 and 4 2 1 7 The insert and delete menu can also be popped up by right click the selected element User can also edit existing element by double clicking the cell in the content column and the element row or double clicking the cell in the content column and value row See Figure 39 Double Click 0008 0033 Content Time TMET MI 14262 I Length S 6H AE TMETM gt VM 101 Double Clic
16. a data element may have a VR or not In DICOM Detective The VR is displayed only when the data element has a VR The VR is displayed in following format XX YY Where XX is from the capture data YY is DICOM defined VR it is from the dictionary VM is displayed in the following format M N 31 Where M is the real number of values N is DICOM defined VM it is from the dictionary e When an element has undefined length 0xFFFFFFFF it will be displayed with the actual length as Figure 34 demonstrated OW LOB E 6000 3006 Gvertay Data B00000000000000000000000000000000000000000000000000000000000000000 El 7FED POLO Pixel Data a aM 10111 H Frame Item Figure 34 Undefined length display _DICOMDetective Gycapfile 18958164 rw dnm aloj x File E Dat Data D ToolstT Windows HelpiH JE x E PDU Service element Simulator SCU Simulator SCP Fl A ASSOCIATE RO 11 7 167000 11 7 167000 erre gt H A ASSOCIATE AC 12 7 181000 12 7 161000 OZ0000000086000100 H M GET RO 13 7 182000 15 7 342000 Basic Grayscale Print Miu gt H N GET RSP 16 7 351000 18 7 531000 Basic Grayscale Print Y Tag 1001 0010 H M CREATE RO 20 8 279000 22 8 443000 Basic Grayscale Print I gt H M CREATE RSP 23 8 467000 25 8 624000 Basic Grayscale Print M 4 N CREATE RO 26 8 626000 28 6 744000 Basic Grayscale Print V gt H N CREATE RSP 29
17. national standard in Chinese Internet Protocol The International Organization for Standardization Organisation internationale de normalisation widely known as ISO is an international standard setting body composed of representatives from various national standards organizations JIS encoding refers to several Japanese Industrial Standards JIS X 0201 JIS X 0208 JIS X 0213 and JIS X 0202 for encoding the Japanese language Multi Document Interface Protocol Data Unit Presentation Data Values Service Class Provider We deem that SCP is the application that accepts the communication Service Class User We deem that SCU is the application that initializes the communication Shift JIS 1s a character encoding for the Japanese language originally developed by a Japanese company called ASCII Corporation in conjunction with Microsoft and standardized as JIS X 0208 Appendix 1 Service Object Pair Unique Identifier Unicode Transformation Format 8 Value Multiplicity Value Representation 2 SYSTEM REQUIREMENTS Following system requirement is required to install and use DICOM Detective Category Operation System Requirement Microsoft Windows 95 98 or Microsoft Windows NT 2000 XP 2003 Vista One of following network analyzers is required to get the input for the DICOM Detective Category Capture Driver Network Analyzer Requirement WinPcap http www winpcap org One of the following e NetXRay 2
18. select a capture file and hit open User also can drag a capture file in windows explorer and drop it to DICOM Detective Then a dialog will be popped up as Figure 14 User may enter start and end packet number The packet number is 1 based regardless of type of network protocol analyzer Usually user needs not to set the start and end packet number The DICOM Detective will do it for the user It is for the case that user wants to avoid some bad packets of the capture data The hint for seeking a start packet of a DICOM communication using network protocol analyzer is to seek the Calling and Called AE Titles in the packets just by viewing the content of the binary packets For the most cases the first packet a User can change file to be opened at the top edit box Button la would pops up an Open file dialog to help Dragging a capture file in windows explorer and drop it into the edit box would also work b The option of Keep disordered and duplicated packets is default checked when you get errors for opening a capture file you may try to open the capture file without checking this option c If Open directly if only one connection is checked DICOM Detective would skip the connection selection dialog in the next step This option is remembered every time user changes it d If Skip error message is checked DICOM Detective would not popup error message even there are errors while analyzing the DICOM data e User can choose followi
19. the format of Data gt Export Data User can import the data using Data gt Import Data 4 Start would start the Gateway Capture Daemon to listen to request from SCU The Gateway Capture Daemon will stop until the Stop is pressed or one DICOM communication is finished The captured data would be stored as files in the format of Data gt Export Data 5 Stop would stop the Gateway Capture Daemon 18 DICOM 6 Analyze would open the capture data in a MDI window x WinPCap Capture Gateway Capture SCU gt Gateway Capture Daemon Gateway Capture Daemon gt SCP IP address 192 168 1 3 IP address 192 168 1 5 i f gt gt Timeout 500 Timeout 500 Output Folder C Program Files DICOM Tool DICOM Detective GatewayCapture Start Analyze Figure 22 Gateway Capture UI 4 2 1 13 Capture gt Dynamic Statistics and Text Dump DICOM Detective supports dynamic DICOM traffic rates and network interface status statistics and dynamic dumping communication contents to text files that can serve as DICOM communication log 4 2 1 13 1 Dynamic Statistics Dynamic Statistics function uses WinPcap to capture DICOM network communications and dynamically extracts the DICOM statistical information to save and display Which statistical information should be calculated is configurable e g you can gather statistical traffic information for bytes sec in out of an IP and or port
20. 000000 Update Delete Number of 00280 Multiframes Count 350 000000 Add Service Add category Tag 20280008 IS Number of Frames v Dynamic statistics sum every Label Multiframes Statistics Action Count v 6 Min v Max Rate sec 350 Add Update Delete Statistics History folder SR C Program Files DICOM ToollDIC Max TCP IP 1310720 Refresh Statistics PO Sec Rate bytes sec Screen every ans Figure 27 Statistics Setting e User must define which service DICOM Detective should calculate the traffic statistics for To define the service user must enter the service name then hit Add Service button 22 DICOM User must specify the command tags and values of the service e g when command field 0000 0100 1s 0x8020 and Affected Sop Class UID 0000 0002 is 1 2 840 10008 5 1 4 1 2 2 1 or 1 2 840 10008 5 1 4 1 2 1 1 the service is DICOM instance query Properties is used to specify the service User may Add Update Delete command tags and values to the service multi value should be separated with back slash User must specify which parameter should be calculated for traffic statistics and how that parameter is calculated Currently DICOM Detective supports following calculations for traffic statistics o Count would count total occurrence of the specified tag Not includes tag in sequence elements o UniqCount would count total occurrence of the specified tag without duplication o DeepCount would count tota
21. 1 Value 1998 07CEH 0028 0034 Pixel Aspect Ratio IS IS 1001100 0028 0100 Bits Allocated US US 8 0008H LLLLLLLLLULLULLLLLLLI By IP Address 192 168 1 4 Port 1028 g E IP Address 192 168 1 60 Port 104 Z Figure 10 Service Elements View 4 1 3 SCP Simulator The SCP Simulator view is used to simulate the SCP peer to reproduce the DICOM communication and helps to trace and debug SCU products The DICOM Detective can start a daemon to listen to the specific port that entered by the user to simulate the SCP peer Users can use their own SCU product to interact with the DICOM Detective SCP simulator as interacting with the real on site SCP product After the SCU peer initializes the communication the DICOM Detective SCP simulator will receive all packets sent from SCU peer and send back capture packets that were originally sent by the simulating SCP product to SCU peer using DICOM communication protocol The receiving and sending are done in original time sequence Using SCP Simulator user can reproduce the problem that happened onsite and trace and debug the SCU program without the on site SCP product Figure 11 is an example of SCP Simulator view DICOMDetective G capfile 10bT capture adr1000 and AGFA 450003 JO x File F Edit E Data D Capture C Tools T Windows W Help H 1 8 x ls eal PDU Service element Simulator SCU Simulator SCP Statistics Connection Setting Run SCU Pro
22. 168 1 60 Port 104 IV Synchronize Joint Connection Joint Connection First Connection Group Order fo Reset Communication Packets Save As Received Ej Sent Continue E IP Address 192 168 1 4 Port 1028 q JET IP Address 192 168 Figure 12 SCU simulator 4 1 5 Statistics View The statistics view shows data transmission rate patient transmission rate study transmission rate series transmission rate image transmission rate and frame transmission rate etc in table Figure 13 1s an example of Statistics View DICOMDetective G capfile 10bT capture adr1000 and AGFA 4500 cap 192 168 1 4 Ol x File F Edit E Data D Capture C ToolstT Windows W Help H 8 x u DM PDU Service element Simulator SCU Simulator SCP Statistics 192 168 1 4 1028 gt 192 168 1 60 104 4 851M Bytes in 16 192s 306 769K bytes s Service Category Images Print Summary 1 0 062 s 192 168 1 60 104 gt 192 168 1 4 1028 1 138K Bytes in 10 558s 110 342 bytes s 192 168 1 4 1028 lt gt 192 168 1 60 104 192 168 1 4 1028 lt gt 192 168 1 60 104 Figure 13 Statistics View DICOM Hare Manual of the DICOM Detective Enterprise 4 2 DICOM Detective User Interface 4 2 1 4 2 1 1 l 2 3 Menus and Toolbar File gt Open a Capture File ps The Open a Capture File menu pops up an Open file dialog User should
23. 3 619325 Comprehensive SR Explicit VR Little Endian E Command Set total 7 Data Set total 39 H C STORE RSP 6456 21 421814 6458 21 582961 Comprehensive SR Explicit YR Little Endian H 4 RELEASE RQ 6459 21 599364 6459 21 599364 05000000000400000000 A RELEASE RP 6460 21 635011 6462 21 801716 06000000000400000000 E IP Address 192 168 8 2 Port 1040 g E IP Address 192 168 8 32 Port 04 Z Figure 37 Data set contains SR e When a data set contains a structure report like Figure 37 a E button will be attached to the data set User can click the button to start the DICOM structure report viewer to view the structure report contained in the data set User can set the SR viewer in the option dialog Figure 38 shows the SR viewer that comes with the DICOM Detective e User can save a dataset to a file by clicking f l button 33 DICOM a gt Manual of the DICOM Detective Enterprise EB report 10 dem SEBrorseEng File Edit View Help FS Study Date Study ID Accession Number Referring Physicians Name Report Status Completion Flag PARTIAL Verification Flag UNVERIFIED Report Request MRI Knee History 16 year old with right knee pain after an injury playing basketball Findings Finding The bony structures are intact and normally aligned There is bruising of the medial femoral condyle with some intrasubstance injury to the medial collateral ligament
24. 4 2 1 12 Capture gt Capture Packets DICOM Detective can capture packets onsite This menu would bring up Capture Packets dialog DICOM Detective supports following 2 ways to capture packets 4 2 1 12 1 WinPcap Capture The first way to capture packets is to use WinPcap which is a famous free network data capturing driver User must download the WinPcap and install it for using this function The official home page of WinPcap is http www winpcap org Capture Packets ERE xl WinPCap Capture Gateway Capture Interface 2 Device NPF_ 4B0C3464 501 3 4730 47E 4 708467BBEBE 3 Broadcom I Remote IP address 192 168 1 3 Time Format Sec since beginning of capture v Filter Ilse een Filter Help Output File C Program Files DICOM Tool DICOM Detective CatureFile file pcap EG Max Buffer fi 024 M Max Dynamic Wd 20 Dynamic Analyze Start Stop Analyze Figure 19 WinPcap Capture Figure 19 is WinPcap Capture user interface 1 User should select a network Interface or network card to capture the packets 2 DICOM Detective supports remote capturing function of WinPcap WinPcap remote daemon should be run in the remote computer Remote button is used to get remote network interfaces When the Remote button is clicked a dialog like Figure 20 would be shown a The remote host IP address should be entered in Host field and Port is for WinPcap remote capturing port default value is 2002 gt You must mak
25. 5 or greater e g Sniffer Pro 4 5 e Distinct Network Monitor 4 2 or greater use dnm files http www distinct com e Shomiti Surveyor 2 4 or greater snoop file format http www shomiti com e Ethereal 0 9 15 or greater http www ethereal com e WireShark 0 99 6 or greater http www wireshark org e 5 view Product Suite http www infovista com DICOM 3 INSTALLATION You must have the administrator privileges to install the DICOM Detective Run the setup exe install exe for trial version to install the DICOM Detective Figure I to Figure 7 illustrate steps for the DICOM Detective installation During installation user should enter authorized user name company name and product ID Without authorized product ID the installer would not proceed and no warning is given Ask service Q dicomtool com for authorized product ID Although user can make many selections basically what user needs to do is only click Next button and Finish button ig DICOM Detective Setup 15 x Welcome to the DICOM Detective Installation Wizard It is strongly recommended that you exit all Windows programs before running this setup program Click Cancel to quit the setup program then close any programs you have running Click Next to continue the installation WARNING This program is protected by copyright law and international treaties Unauthorized reproduction or distribution of this program or any por
26. 8s 4 269M bytes s Service Category Patient Study Series Images Instance Frames Summary 1 1 0 305 s 11 00 305 5 11 00 305 5 17904 964 5 1179 4 964 5 1794 964 5 Storage Category Patient Study Series Images Instance Frames Modality US 1 1 0 305 5 11 0 305 5 11 0 305 5 17904 964 5 179 4 964 s 1179 4 964 5 192 168 1 10 2100 gt 192 168 152x 96 920K Bytes in 43 2405 2 241K bytes s Service Cate E Patient 192 168 110 E IP Address 192 166 1 52 Port 1036 qj IE IP Address 192 168 1 10 Port 2100 E Figure 44 Statistics View 4 2 3 Command Line DICOM Detective supports command line to export text report merge DPM user info and DVT script The usage is DICOMDetective exe 1 inputpath o outputpath et ed em s v I inputpath Input path Could be a file name or a folder name If it is a folder name all files inside the folder would be processed O outputpath Output path e For text report dumping o Ifthe input path is a file name the output path could be an output file name or a path that the output file would be generated in o If the input path is a folder name the output path must be a path that the output files would be generated in e For merge DPM user info o If the input path is a file name the output path could be an output file name or a path that the output file would be generated in o If the input path is a folder name the out
27. 92 168 10 2 5 104 Command Set total 7 0000 0000 UL 4 1 124 0000007CH Group 0000 Length 0000 0002 UD 28 1 1 1 2 840 10008 5 1 4 1 1 6 1 Ultrasound Image Storage Affected SOP Class UID 0000 0100 US 2 1 1 0001H C STORE RQ Command Field 0000 0110 US 2 1 1 12 000CH Message ID 0000 0700 US 2 1 1 0000H MEDIUM Priority 0000 0800 US 2 1 1 OOOOH Data Set is Present Data Set Type 0000 1000 UD 40 1 1 1 2 840 146759 7 119 1 1064606707 0 66 4 Affected SOP Instance UID 47 DICOM 48 Data Set total 44 0008 0008 CS CS 58 6 1 n ORIGINALIPRIMAR Y V ASCULAR 0001 DEMOMULTIFRAME DEMOMTCOUNT1 Image Type 0008 0016 UI UD 28 1 1 1 2 840 10008 5 1 4 1 1 6 1 Ultrasound Image Storage SOP Class UID 0008 0018 UKUDN 40 1 1 1 2 840 146759 7 119 1 1064606707 0 66 4 SOP Instance UID 0008 0020 DA DA 38 1 1 20030926 Study Date 0008 0021 DA DA 38 1 1 20030926 Series Date 0008 0023 DA DA 38 1 1 20030926 Content Date 0008 0030 TM TM 6 1 1 162420 Study Time 0008 003 1 TM TM 6 1 1 162420 Series Time 0008 0033 TM TM 6 1 1 162426 Content Time 0008 0050 SH SH 0 0 1 Accession Number 0008 0060 CS CS 2 1 1 US Modality 0008 0070 LO LO 18 1 1 DEMOCH Med System Manufacturer 0008 0080 LO LO 12 1 1 Development Institution Name 0008 0090 PN PN 0 0 1 Referring Physician s Name 0008 1010 SH SH 6 1 1 M0000 Station Name 0008 1040 LO L
28. 94 9 633000 696 9 827000 Basic Grayscale Print M H M SET RO 697 9 620000 1025 10 046000 Basic Grayscale Print Y gt fe M SET RSP 1026 10 166000 1028 10 374000 Basic Grayscale Print de H NM SET RO 1029 10 375000 1355 10 757000 Basic Grayscale Print I gt H M SET RSP 1356 10 528000 1358 11 030000 Basic Grayscale Print V H M SET RQ 1359 11 031000 1683 11 261000 Basic Grayscale Print gt DICOM M l Manual of the DICOM Detective Enterprise DICOMDetective F ycapfile EFIML cap i JC x File F Data D Tools T Windows W Help H x LS gi PDU Service element Simulator SCU Simulator SCP Content H A ASSOCIATE RQ 4 0 000512 5 0 01000000064D0001000041455F5449544C4520202020202020206C782D6D7 zal gt E 4 ASSOCIATE AC 7 0 120228 19 0 02000000033F0001000041455F5449544C4520202020202020206C782D6D7 mal C STORE RQ 21 0 133084 172 0 MR Image Storage Implicit YR Little Endian Default Transfer Syntax for DIC Tag 0009 OG DI C OM IC image fseCommandSet total 8 WM Data Set total 302 T ha C STORE RSP 175 0 154831 175 0 MR Image Storage Implicit YR Little Endian Default Transfer Syntax for DIC C STORE RQ 176 0 159489 326 0 MR Image Storage Implicit YR Little Endian Default Transfer Syntax for DIC Ej C STORE RSP 330 0 303988 330 0 MR Image Storage Implicit YR Little Endian
29. DICOM User Manual Revision 2 00 Manual of the DICOM Detective Enterprise Copyright 2009 by DICOM Tool Co Do not duplicate 3 DICOM Tool http www dicomtool com DICOM THIS PAGE LEFT INTENTIONALLY BLANK DICOM Revision History October 2003 Creation of the document 1 0 December 2003 Release 1 0 1 01 June 2005 Release 1 01 Find function and support for structure Hod ee December 2006 Release 1 02 Support Chinese Japanese JIS and Shift Ks iis Enpon file rame changed o Sn October 2007 Release 1 1 Following functions added Export DVT script Export Merge DPM User Info Auto Encoding Chinese Korean Western Europe language support Verify DICOM Tag VR VM and Value length Add Error column to display errors Drag a capture file or DICOM file from windows explorer and drop to DICOM Detective to open the file Show packet number and time for PDUs and service elements Show binary detail for PDUs Display general information in content column for folded nodes Add DICOM Image viewer button to dataset Add Continue button to continue the simulation without hesitation Add save dataset function to dataset February 2008 2008 DICOM Dictionary Open capture file from Merge toolkit View image embedded in sequence element May 2008 Release 1 12 Following functions added e Find DICOM Files e Support invalid VR OX and XS 1 l 1 1 l 02 s 11 12 13 14 a June 2008 Release 1
30. EEREN BEROEDE 12 LT DUNN ESS Er gere 14 4 2 1 8 Edit gt Reload o e cccccccccccccccssseseseseecescscscescecscsescaeeseecaceecstaceetecaeeeeees 14 4 2 1 9 Data gt Export Data summeres 14 4 2 1 10 Data gt Import DEE AO 15 4 2 1 11 Data gt Export Edited D t aorta seriens 15 42112 C pture gt Capture Packs aan 15 JJ WiaPcap Capture secerneren ern ran 15 221122 Gateway Pre 17 4 2 1 13 Capture gt Dynamic Statistics and Text Dump ees 19 A 2AM oe DSM 19 FN TDN hr EE EG EN EE 42 1 15 Tools gt Report 4 2 1 16 Tools gt Export DVT Scripti hr 25 4 2 1 17 Tools gt Export MergeDPM User Info 25 4 2 1 18 Tools ee 25 4 2 1 19 Tools gt Find and Find Next rrernnrrrrrrrrrrnnrnnvnrrnnnnnnnnenerssssssnnnnnnene 26 4 2 1 20 Tools Fmd DICOM Files usanne 26 4 2 2 DAT 29 DICOM EL DN 29 4 2 2 2 Service Element View ccccceccscecccceccececcsceccscecescesesceceecscacees 31 JE PBN 34 4 2 2 3 Simulator SCU View ccccccccscsececsccsccccsccscsccccscescscaccscacceces 35 42 2 4 Simulator SCP View c cccsccscscceccecscescscaccscaccecescscaccscscceces 38 1225 Statistics View 1 1 YW sssseeeeeeveeeeee ever reven eee ev ennen eee eee is ndesee 39 4 2 3 CommamaL nevne eee 40 APPENDIX A EXAMPLES OF SIMULATOR FUNCTION USAGEGS 42 CASE 1 NETONNET 42 CASE 2 SIMULATOR SCP 0 0 cc cc ceccececcecceccncccccceccsccsccceccscscncescscscecescuscsceesenceecesenees 42 CASE 3
31. O 12 1 1 Development Institutional Department Name 0008 1070 PN PN 4 1 1 n ADM Operators Name 0008 1090 LO LO 6 1 1 RADDEM Manufacturer s Model Name 0010 0010 PN PN 0 0 1 Patient s Name 0010 0020 LO LO 4 1 1 DGW Patient ID 0010 0030 DA DA 0 O 1 Patient s Birth Date 0010 0032 TM TM 6 1 1 000000 Patient s Birth Time 0010 0040 CS CS 2 1 1 O Patient s Sex 0018 1020 LO LO 16 1 1 n RADDEM R3 0 0DF Software Versions 0018 6011 SQ SQ 208 1 1 Sequence of Ultrasound Regions Sequence of Items FFFE E000 NE 200 1 1 Item Sequence Item 0018 6012 US US 2 1 1 1 0001H Region Spatial Format 0018 6014 US US 2 1 1 1 0001H Region Data Type 0018 6016 UL UL 4 1 1 0 00000000H Region Flags 0018 6018 UL UL 4 1 1 2 00000002H Region Location Min X0 0018 601A UL UL 4 1 1 48 00000030H Region Location Min YO 0018 601C UL UL 4 1 1 535 00000217H Region Location Max X1 0018 601E UL UL 4 1 1 437 000001B5H Region Location Max Y1 0018 6020 SL SL 4 1 1 267 00000 10BH Reference Pixel X0 0018 6022 SL SL 4 1 1 10 0000000AH Reference Pixel YO 0018 6024 US US 2 1 1 3 0003H Physical Units X Direction 0018 6026 US US 2 1 1 3 0003H Physical Units Y Direction 0018 6028 FD FD 8 1 1 0 000000 Reference Pixel Physical Value X 0018 602A FD FD 8 1 1 0 000000 Reference Pixel Physical Value Y 0018 602C FD
32. OP Instances which match It triggers one or more C STORE sub Operations on a separate Association It is a confirmed service C STORE The C STORE service is used by a DIMSE service user to store a composite SOP Instance on a peer DIMSE service user It is a confirmed service CT Computerized Tomography Data A unit of information as defined by a single entry in the data dictionary element An encoded Information Object Definition IOD Attribute that is composed of at a minimum three fields a Data Element Tag a Value Length and a Value Field For some specific Transfer Syntaxes a Data Element also contains a VR Field where the Value Representation of that Data Element is specified explicitly DICOM Digital Imaging and Communications in Medicine DIMSE DICOM Message Service Element DVT DICOM Validation Tool GB18030 GB18030 is the registered Internet name for the official character set of the People s Republic of China PRC superseding GB2312 This character set is formally called Chinese National Standard GB 18030 2000 Information Technology Chinese ideograms coded character set for information interchange Extension for the basic set GB2312 GB2312 is the registered internet name for a key official character set of the People s Republic of China used for simplified Chinese characters DICOM IP ISO JIS MDI PDU PDV SCP SCU Shift JIS SOP UID UTF 8 VM VR GB abbreviates Guojia Biaozhun which means
33. RQ gt gt Image viewer The third part DICOM archive server lt lt A RELEASE RP lt lt Image viewer Connection 4 The archive server sent C STORE to the image viewer to store image The third part DICOM archive server gt gt A ASSOCIATE RQ gt gt Image viewer The third part DICOM archive server lt lt A ASSOCIATE AC lt lt Image viewer The third part DICOM archive server gt gt C STORE RQ gt gt Image viewer The third part DICOM archive server lt lt A ABORT lt lt Image viewer You checked every communication detail using PDU view and Service Element View and found that none of your image viewer or the third part archive server violated the DICOM standard But you do not know why you image viewer sent an A ABORT instead of a C STORE RSP after receiving a C STORE RQ since the image viewer accepted the abstract syntax and transfer syntax that the archive server proposed Then you need to debug your image viewer with the DICOM Detective For this case you must use the functions of Joint Connection and Run SCU Process to simulate After open the capture file First setup the network environment Second you should joint connections connection 3 for C ECHO and connection 4 for C STORE for SCU 1 Select connection 3 C ECHO Switch to Simulator SCU view 3 Check Synchronize to ensure the C ECHO and C STORE have the same destination 4 Enter the IP address and Port of the image viewer 5 Ch
34. T gt gt N CREATE RQ gt gt Your DICOM print server The third part CT lt lt N CREATE RSP lt lt Your DICOM print server The third part CT gt gt N SET RQ gt gt Your DICOM print server The third part CT lt lt N SET RSP lt lt Your DICOM print server The third part CT gt gt N ACTION RQ gt gt Your DICOM print server The third part CT lt lt A ABORT lt lt Your DICOM print server You checked every communication detail using PDU view and Service Element View and found that neither the third part CT nor your print server violated the DICOM 43 DICOM standard But you do not know why you print server sent back an A ABORT instead of a N ACTION RSP after receiving a N ACTION RQ Then you need to debug your archive server software with the DICOM Detective Most cases for DICOM print service The Referenced SOP Instance UID 0008 1155 inside Referenced Film Session Sequence 2010 0500 and the Referenced SOP Instance UID 0008 I 155 inside Referenced Image Box Sequence 2010 0510 are dynamically created in print server so these two UIDs fixed in the capture data would not fit for simulation of the DICOM print SCU peer So you need to make modification to the capture data So first you need to export the raw communication data to a directory using the DICOM Detective Then you should find and modify the Referenced SOP Instance UID 0008 1155 inside Referenced Film Session Sequence 2010 0500 and the
35. The third part CT lt lt A ABORT lt lt Your DICOM archive server You checked every communication detail using PDU view and Service Element View and found that neither the third part CT nor your archive server violated the DICOM standard But you do not know why you archive server sent back an A ABORT instead of a C STORE RSP after receiving a C STORE RQ Then you need to debug your archive server software with the DICOM Detective To debug you archive server 1 You should setup the network environment 2 Choose the correct version of your archive server and use same settings with what is used onsite 3 You should set break points and start you archive server with the debug mode then your archive server can listen to a certain port Open the capture file came from the service man with the DICOM Detective Select the correct connection and switch to the Simulator SCU view Enter the IP address and port of your archive server Presses begin to start simulation Suk dr Then the DICOM Detective simulator SCU begins to interact with your archive server The progress bare indicates the progress and messages are displayed in the message bar You archive server will stop at the break point and you can trace and debug you source codes Case 2 Simulator SCP Suppose that your DICOM conforming CT could not function well with a third part DICOM archive server in a customer s site 1000 kilometers away You could not travel
36. a DICOM file is opened user can reload the opened DICOM file from the disk by selecting this menu Reloading the file would discard any change made to the file A warning dialog would warn user that all changes would be lost before reloading 4 2 1 9 Data gt Export Data This function is used for DICOM experts to compose their own communication data for simulation DICOM experts can export the original communication data of the current connection into files in a directory The exported data is pure DICOM communication data It contains no redundant packet wrapping data made by network analyzer DICOM experts can modify the binary files to compose new communication data Then DICOM Detective can import the composed communication data and do simulation User can export the real captured communication data into files in a directory A file may contain one or more capture packets Files are named by following convention PPPPPPPPPP XXX XXX XXX XXX port where pppppppppp is the 1000 times of packet number of the first packet in the file The packet number is based regardless of type of the network analyzer xxx xXX XXX XXX IS the destination IP address of packets amp port is the destination port of packets After user selects Export Data menu the DICOM Detective will popup an Open folder dialog user should enter a directory name and hit open Then the DICOM Detective will create a directory and export the communicati
37. ages Save As Received St Start Eontinue Stop E 07 Address 192 168 0 150 Port 32882 G gt E IP Address 192 168 ve Figure 42 Sample of Simulator SCP View Figure 42 is a sample of simulator SCP view User should enter a Port for the SCP simulator to listen to The port is synchronized for all connections in a group If user enters the file path for Communication Packets Save As Received or and Sent the received and or sent packets during simulation will be saved to the corresponding files binary file Often time user can leave this field empty It is for users who want to know details of the network communication for the simulation User should click Start button to start simulation If the simulation starts the progress bar will indicate the simulation progress and message bar under the progress bar will show simulation messages If the simulator pauses while simulation it is waiting for data from the other communication peer user can click Continue button to skip receiving the data and accelerate the simulation Stop button is used to stop the simulation SCP simulator can start the SCU simulator during the SCP simulation to simulate one connection or a group of connections by using Run SCU Process function to synchronize the SCP simulations and SCU simulations E g for DICOM image server implementations after receiving a C MOVE request in a connection a series of C STORE should b
38. and you also can gather statistical traffic information for images sec in out of an IP and or port Figure 23 shows Dynamic Statistics user interface Hi Dynamic Statistics and Text Dump 2009 09 07 14 25 17 gt 2009 09 07 14 52 12 z a ixj Interface 2 Devi e NPF_ ABOCSAGA 501 3 4730 A7E4 70AA67E Interface Info Statistics Dump Taget P 1192 168 1 3 IP 192 168 Netztreme Gigabit Ethemet Driver Microsoft s Packet y 3 OVO SUCOTT IN pa Ex 104 or 6104 or 7104 Max Buffer 1024 2 4104 Ge Ex not 2002 and not 80 Fest Brno Setina Exclude local IPS Additional Filter Ex host 19216801 M far SEES Satie 258445 captured 1314 byte s all association s analyzed Locally Administered Address Speed Duplex Auto Statistics Dump Text Current 192 168 1 3 2727 gt 192 168 1 2 104 37 691K Bytes in 0 078s 482 456K bytes s Service Category Patient Study Series Images Instance Frames Summary 1 12 800 s 1 12 800 s 1 12 800 s 1 12 800 s 1 12 800 s 1 12 800 s Storage Category Patient Study Series Images Instance Frames Modality US 1 12 800 s 1 12 800 s 1012 800 s 1012 800 s 1 12 800 s 1 12 800 s 192 168 1 2 104 gt 192 168 1 3 2727 4 132K Bytes in 0 303s 13 654K bytes s Summary 192 168 1 3 x gt 192 168 1 2 104 1 576M Bytes in 1 878s 859 509K bytes s Service C
39. ategory Patient Study Series Images Instance Frames Summary 1 0 533 5 1 0 533 s 1 0 533 s 17 9 054 s 1 0 533 s 1709 054 5 Storage Category Patient T Study Series Images Instance Frames e I f f ar ea wrm la rA Pnn slem ranis lazna sag slam nmass larna enana s lamn neways Histary Bytecsyiser v Figure 23 Dynamic Statistics 1 Statistical traffic information report is categorized into 2 sections e Current section displays the current DICOM statistical traffic information 19 DICOM e Summary section displays the summary DICOM statistical traffic information of certain time span This time span can be configured by user e g 5 minutes 2 The history gram on the bottom shows the traffic rates dynamically The dropdown combo box on the right bottom corner is for selecting which parameter to show 3 Save To button brings up a save as dialog for user to specify a file in order to save the current displaying report to a html file 4 History button brings up a statistics history dialog like Figure 24 e Left drop down combo box is used to select history file e Right drop down combo box is used to select parameter to show E Statistics History for 192 168 1 3 104 2009 09 04 20 37 45 2009 09 05 06 42 40 097104 20 37 45 bi Bytets SEC as Figure 24 Statistics History 4 2 1 13 2 Text Dump Text Dump function uses WinPcap to capture DICOM network comm
40. ateway Capture Deamon first The DICOM Detective Gateway Capture Deamon will make a copy of the data to local disk and then forward the data to SCP devices Data from SCP is also transferred through this tunnel it first is sent to the DICOM Detective Gateway Capture Deamon the DICOM Detective Gateway Capture Deamon would make a copy of the data to local disk and then the data is forward to SCU devices The captured data would be stored as files in the format of Data gt Export Data Figure 21 illustrates how Gateway Capture works 17 DICOM Ordinary network capture that may Network PE a not work DICOM Na Gateway capture Communication x N Se SCP Figure 21 Gateway Capture illustration Figure 22 is Gateway Capture user interface 1 SCU9Gateway Capture Daemon block defines the DICOM Detective Gateway Capture Deamon listening port for listening SCU request e IP address is for displaying the IP addresses of current available network interface it is not editable just for information e Port defines listening port for listening SCU request e Timeout defines timeout of connection with SCU 2 Gateway Capture Daemon block gt SCP defines the SCP connection parameter e IP address should be set to the IP address of SCP e Port should be set to the listening port of SCP e Timeout defines timeout of connection with SCP 3 Output Folder defines the folder that holds capture data which is stored in
41. cate the simulation order The group order will be displayed in format of _ order for standalone connection where the underscore indicates that the connection has not been grouped and the order just gives identification to the connection e User can uncheck the Joint Connection check box to kick a connection and the followed connections out of the group e User can uncheck the First Connection check box or hit Reset button to delete the group e User can click Begin button of any connection in a group to start simulations in the group 36 DICOM DICOMDetective F ycapfilei1012 cap FF JO x File F DatatD Tools T Windows W Help H G BA D SE F capfile 1012 cap 1 Mlaisi E F capfile 1012 cap 3 PDU Service element SimulatorSCU Simulator SCP PDU Service element Simulator SCU Simulator SCP r Connection target Connection target IP address 17 0 0 1 Port 104 IV Synchronize IP address 1272 70 OF 4 Pott 104 IV Synchronize Joint Connection Joint Connection IV Joint Connection IV First Connection Group Order 0 0 Reset IV Joint Connection IV First Connection Group Order 1 0 Reset Tommunication Packages Save As Communication Packages Save As Received ae Received Sent ll lt lt io onion S EA J EF F capfile 1012 cap 4 PDU Service element Simulator SCU Simulator SCP
42. ce dicomtool com for authorized user information Your Orgnization our Product ID Read this carefully Figure 3 Installation Step 3 ag DICON Detective Setup Destination Folder Select a folder where the application will be installed Figure 4 Installation Step 4 id DICOE Detective Setup Select Installation Type Select the desired installation type z H 2 a Figure 5 Installation Step 5 ADSL Manual of the DICOM Detective Enterprise iz DICOE Detective Setup 10 x Ready to Install the Application Click Next to begin installation gt Click the Back button to reenter the installation information or click Cancel to exit the wizard Wise Installation Wizard Fi DICOM Detective has been successfully installed Click the Finish button to exit this installation ish Cancel Figure 7 Installation Step 7 4 DICOM DETECTIVE USER S MANUAL 4 1 DICOM Detective Functionality Overview The DICOM Detective works in conjunction with an off the shelf network analyzer to allow the ability to examine simulate and debug the DICOM network communication DICOM Onsite Offsite r TE ee ee aici FA Vera Dion Display DICOM Information With PDU DICOM Detective 1 Detective View and Service Element View DICOM Detective To find problems of SCP peer Simulato
43. cess a Kr On chr onze Port 10 Group o r CA Joint Connection Joint Connection First Connection Irder 0 Communication Packets Save As Received HEGE ee Sent FE El Continue E IP Address 192 168 1 4 Port 1028 q E IP Address 192 168 Figure 11 SCP Simulator DICOM 4 1 4 SCU simulator The SCU Simulator view is used to simulate the SCU peer to reproduce the DICOM communication and helps to trace and debug SCP products The DICOM Detective can start a DICOM connection to simulate the SCU peer Users can use their own SCP product to interact with the DICOM Detective SCU simulator as interacting with the real on site SCU product The DICOM Detective SCU simulator can send all capture packets that were originally sent by the simulating SCU product to SCP peer using DICOM communication protocol and receive all data from SCP peer The receiving and sending are done in original time sequence Using SCU Simulator the user can reproduce the problem that happens online and trace and debug the SCP program without the on site SCU product Figure 12 is an example of SCU simulator view DICOMDetective G capfile 10bT capture adr1000 and AGFA 4500 Ol x File F Edit E Data D Capture C Tools T Windows W Help H j x GA SEG E PDU Service element Simulator SCU Simulator SCP Statistics Connection target IP address 192
44. d for captured data analysis The selections are same as described in 4 2 1 1 They are a Sec since beginning of capture b YYY MM DD HH MM SS M c Sec since Epoch 1970 01 01 Time format selection in this page affects the selection in the open file wizard dialog It means if the time format selection in this page 1s changed to a certain one next time the open file wizard dialog would choose same selection as default Filter is used to filter capture data e g host 192 168 1 2 and tcp means only capturing TCP data that goes into out of host 192 168 1 2 The filter follows rules of WinPcap filter User can go to WinPcap s pages to get help or the Filter Help button shows a help menu Filter Help button shows a help menu Output file defines the capture file to be saved Button E brings up a Save As dialog to help to specify capture file Max Buffer defines maximum buffer size used for DICOM data analysis 16 DICOM 9 Max Dynamic Wnd defines maximum number of MDI windows opened for dynamic analysis 10 Start would start the data capturing and save the data to the file 11 Stop would stop the data capturing 12 Analyze would open the capture file and display the contents of it 13 Dynamic Analyze would start the data capturing And same time it would analyze the coming capture data dynamically When a DICOM communication is fully completed a MDI window would be opened and the contents of the DICOM commun
45. dress Tag format ggggeeee e g 00100010 VR ST gt Value fox institution Sequence Item Use to seperate values regardless of VR e g 1 012 1 for FD element Fix word I Replace If Exist GENERATE_UID for UI element to Auto generate VID Binary file name for OB OW OF UN elements to get the binary value Cancel Figure 17 Insert DICOM Element User should enter the element Tag VR and value in the dialog to insert an element 1 If user wants to insert a sequence item under the selected item the Sequence Item should be checked a Inserting a sequence item to a non SQ element is not allowed b User must insert FFFEE000 Sequence Item first to the SQ element then insert sub elements to the FFFEEOOO Sequence Item Trying to insert an element that is not FFFEE000 Sequence Item or FFFEEODD Sequence Delimitation Item to a SQ element would raise an error dialog like Figure 18 DICOMDetective Error i x Only element FFFEEOQOO Tten and FFFEEODD Sequence Delimitation Item EP are supposed to be inserted under Sequence of Items or Frame Item Continue to insert 00000600 Figure 18 Error Dialog for inserting SQ item c To insert sub elements to the FFFEE000 Sequence Item FFFEEOOO Sequence Item should be selected and the Sequence Item should be checked While inserting a sub element to the FFFEE000 Sequence Item a dialog may asks if the new element is in explicit VR yes means explicit VR no means implicit VR
46. e sent in another connection In this case the DICOM image server implementation will play the SCP role for C MOVE and SCU role for C STORE Run SCU Process function is used to simulate this kind of implementations 38 M l Manual of the DICOM Detective Enterprise DICOMDetective Fi capile 1012 cap 1 x File E Dats Di Tools T Windowsiw HelpiH a x CURRAR gi POU Service element Simulator SCU 9 Simulator SCP Connection Setting Run SCU Process Port 104 Group Joint Connection h Joint Connection f Synchronize Atthe end of this process Group Order 0 0 Reset Communication Packages Save As Received Pe E sent El Iv First Start Eontinue Stop By IP Address 192 168 0 150 Port 32639 dem E IP Address 192 168 5 Figure 43 Run SCU Process Figure 43 shows choices for Run SCU Process function User can choose a connection or a group of connections using the Group combo box The listed connection groups or standalone connections are made in the Simulator SCU view they are not from the Simulator SCP view Group is displayed in the format of group The choice of synchronize will synchronize the simulation of the selected SCU connection s with the simulation of the current SCP connection E g to simulate DICOM retrieve service this choice should be used The choice of At the end of this process will make the SCP simulat
47. e sure that all files in the directory are exported by DICOM Detective Otherwise it might cause problem 15 DICOM gt b If the remote capturing needs authentication the Authentication should be checked and Username and Password should be entered c When Get Interfaces is clicked the Interfaces list box would list all available remote network interface d If Automatically getting interfaces while starting up is checked next time when DICOM Detective starts the WinPcap capture function or Dynamic statistics and Text dump function it would automatically gets network interfaces from the remote host Notice that it would take time if the remote host is not online e OK button would close the dialog and bring all remote interfaces to WinPcap capture dialog If a interface is selected in the Interfaces list box it would be selected as default interface for WinPcap capture dialog f Cancel button closes the dialog Add Remote Interfaces i x Remote host RPCAP passive mode Exclude this port in your capture fileter using not port xxx Host 192 168 1 4 Port 2002 Cancel Default Port 2002 Get Interfaces Authentication Username fjack Automatically IV Authentication getting interfaces paa while starting up Interfaces Figure 20 Remote Interface IP address displays IP address of the current selected network interface Time format defines time format displayed in the views opene
48. eck the First Connection then the Joint Connection is automatically checked the group order is displayed as 0 0 6 Select connection 4 C STORE 7 Switch to Simulator SCU view 8 Check Synchronize to ensure the C ECHO and C STORE have the same destination The IP address and Port will be automatically changed to be same with the IP address and port of connection 3 9 Check Joint Connection keep the First Connection unchecked then the group order is displayed as 0 1 45 DICOM M l Manual of the DICOM Detective Enterprise Third you should joint connections connection 1 for C ECHO and connection 2 for C MOVE for SCP 1 Select connection C ECHO 2 Switch to Simulator SCP view 3 Enter the Port to which the simulator daemon will listen 4 Check the First Connection then the Joint Connection is automatically checked the group order is displayed as 0 0 5 Select connection 2 C MOVE 6 Switch to Simulator SCP view 7 Check Joint Connection keep the First Connection unchecked then the group order is displayed as 0 1 and the port is automatically changed to be same with the port of connection 1 Forth you should combine the SCU of C ECHO and C STORE with the SCP of C ECHO and C MOVE using Run SCU Process Select connection 2 C MOVE Switch to Simulator SCP view Check Synchronize to enable synchronize simulation for C
49. ecting a selection from the drop down combo box under Interface Info 10 Start would start the traffic Statistics and or Text Dump 11 End would end the traffic Statistics and or Text Dump 12 An information bar besides stop button shows capturing and analysis information 13 Text Dump Setting brings up Text Dump Setting dialog like Figure 26 e Dump to folder defines the log files location e Max files defines max number of log files e Max file size defines max file size of each log file e Max lines in log window defines the max lines of log window Text Dump Setting x C Program Files DICOM Tool DICOM Detective DumpText Dump to folder Max files 110 Max file size 10 M Max lines in log window 2000 Cancel Figure 26 Text Dump Setting 14 Statistics Setting brings up Statistics Setting dialog like Figure 27 xl Storage Properties auth Name Tag value uery Command 0x0001 Modality Worklist Command 0000 Ox000 Retrieve Tag 00000100 US Command Field v Value 0x0001 Add Update Delete Statistics Items Name Tag Label Action Max Rate sec Patient ID 00100 Patient UnigCount 50 000000 Study Inst 00200 Study UnigCount 50 000000 Series Inst 00200 Series UnigCount 50 000000 Storage Pixel Data 7FE00 Images Count 700 000000 torage SOP Instan 00080 Instance UniqCount 700 000000 Number of 00280 Frames Acumulat 700
50. ejexportisrireport02 dcm Osterman Phillip B SR Open Image F lcapfilelexport sr report03 dem Silverman Elaine J SR F lcapfilejexportisrireport04 dcm Mars Verna Marie de SR Open SR F icapfile export srireportOS dcm Silverman Elaine J SR F lcapfilejexportisrireport09 dem Smith Harold SR 3 F JranfilelexnarHsrirenart UN drm Walz Inhn R SR sil To Clipboard 4 gt 00080060 CS Modali foals hd Tag sald g 20 of 31 Tag format ggggeeee e g 00100010 xis wildcard Delete Column Add Column in O1s 1 File s isfare selected now Figure 30 Search DICOM Files Dialog User can find DICOM files under a directory and its sub directory Figure 30 1s the Search DICOM files dialog amp Enter the directory or file specification with wildcard to be searched in the Look in The button helps to locate the directory Try to use wildcard to filter out no DICOM files amp User may add update delete search criteria by providing DICOM tag and value The criteria are in the relationship of the AND e No value element criteria would test if the DICOM file contains the element e Use backslash to separate multiple criteria value E g For Image Type 0008 0008 criteria ORIGINAL PRIMARY means to search DICOM files that contains element Image Type 0008 0008 that has values include string ORIGINAL and string PRIMARY amp The multiple criteria for an element are in the relationsh
51. f the element exists Not support No value means to test if the element exists String Matching backslash for multiple criteria String Matching backslash for multiple criteria Signed long value matching backslash for multiple criteria Not support Signed short value matching backslash for multiple criteria String Matching backslash is deemed as part of the criteria String Matching backslash for multiple criteria String Matching backslash for multiple criteria Unsigned long value matching backslash for multiple criteria Not support Unsigned short value matching backslash for multiple criteria String Matching backslash is deemed as part of the criteria e g 1 1 means between 1 and I 1 2e2 means less then or equal to 12 e g 2007 20080930112230 means from 2007 01 01 to 2008 09 30 11 22 30 200805 means less then 2008 05 01 00 00 00 e g 1 3415926 1 3415972 1 34 1 02e8 e g 1 3415926 1 3415972 1 34 1 02e8 e g 1 20 3 20 Not support Not support Not support Not support Not support Not support Not support e g 1 10 2 15 Not support e g 1 10 2 15 Not support e g 112233 154456 means from 11 22 33 to 15 44 56 1540 means less then 15 40 00 Not support e g 1 10 2 15 Not support e g 1 10 2 15 Not support e The Search button executes the search action User can cancel the search by Cancel button
52. he system default port name dictionary file 1s PortName txt DICOM Image Viewer The path of DICOM image viewer executable file It can be any DICOM image viewer that can take DICOM image file path as the first parameter to open the DICOM image file The DICOM image viewer will be lunched to open the image while user clicks the lid button in the service element view DICOM SR Viewer The path of DICOM Structure Report viewer executable file It can be any DICOM Structure Report viewer that can take DICOM SR file path as the first parameter to open the DICOM SR file The DICOM SR viewer will be lunched to open the structure report while user clicks the E button in the service element view DVT SOP Definition The file path of DICOM SOP class to DVT definition map It is used for generating DVT scripts The system default file 1s DVTSOP txt 24 DICOM e Verify DICOM Tag VR VM and Value Length Check this if you want DICOM Detective to verify whether all the DICOM Tag VR VM and Value Length are following the DICOM standard Uncheck this to save analysis time The default is checked amp Auto Encoding Check this if you what DICOM Detective to translate the special characters in the file to you local characters according to the Special Character Set 0008 0005 SCP Default Port It is the default listening port of the SCP simulator daemon SCP Timeout It is timeout for connection while performing SCP simulation e SCU Ti
53. hows details of the DIMSE message Includes Command Data Elements by the tree list Figure 10 is an example of service elements view DICOM M l Manual of the DICOM Detective Enterprise DICOMDetective G capfilei 10bT capture adr1000 and AGFA 4500 cap 192 168 1 4 1028 lt 192066 bO 104 Oj x z File F Edit E Data D Capture C Tools T windows W Help H z lal xj e E wali PDU Service element Simulator SCU Simulator SCP Statistics VA Content tection CE N CREATE RQ 25 5 920465 27 5 920865 Basic Grayscale Print Management Meta SOP Class gt N CREATE RSP 29 9 631161 31 9 825665 Basic Grayscale Print Management Meta SOP Class l N SET RO 33 17 663193 6929 26 013882 Basic Grayscale Print Management Meta SOP Class xa D 2020 0110 Ne i H Command Set total 7 i H Data Set total 2 i gt 2020 0110 Ne fl 2020 0010 Image Box Position US US 1 0001H 2020 0110 Basic Grayscale Image Sequence 50 5Q Length 5015122 4C8652H WR 5Q 5Q VM 1 1 Sequence of Items El FFFE E000 Item I 2020 0110 Ne 2020 0110 5015110 4C8646H 1 1 Sequence Item H 0028 0000 Group 0028 Leng UL UL 106 00000064H 0028 0002 Samples per Pixel US US 1 0001H 0028 0004 Photometric Inte CSfCS MONOCHROME2 0028 0010 Rows US US 2510 09CEH 0028 0011 Columns US US 1998 07CEH Length 2 2H YR US US VM 1
54. i E Application Context ju Er Presentation Context AC Total 81 El Presentation Context AC 1 acceptancelVerirication SOP Class Implicit YR Little Endian Def Ly jus Them Type 3s 21H hamu Reserved D Them Length 2561 9H gm 6 he Presentation Context ID 1 1H Reserved OG q i be Result Reason OfOH oo Reserved o0 g Eb Transfer syntax 0 Item Type 64 40H a Reserved D i Them Length 17 11H g io Transfer Syntax Mame 1 2 840 10008 1 2 Implicit YR Little Endian Default Transfer Sv in H Presentation Context AC 3 abstract syntax not supported provider rejection Detached Pa nl fn HF Presentation Context AC 5 abstract syntax not supported provider rejection Detached Vis fan ju HH Presentation Context AC 7 abstract syntax not supported provider rejection Detached Sk 1 e a Presentation Context AC 9 abstract syntax not supported provider rejection Detached Re al E Presentation Context AC 11 abstract syntax not supported provider rejection Detached In inl Text E Presentation Context AC 13 acceptance Modality Worklist Information Model FIND Implicit sei View i EPresentation Context AC 15 abstract syntax not supported provider rejectioniiStudy Comp 7 Button fe User Infomation 5i oe DATA TF 102 187 169900 108 1 0400000000580000005 40003000000000400000046000000000 1 et PDL Type 4 4H gt Reserved D gt PDU Length B8 58H gt Presentation Data value Items Tot
55. ication would be displayed in it The maximum number of MDI windows is defined by Max Dynamic Wnd When the maximum number is reached the capture would be stopped automatically Typically WinPcap capture use cases are like this e Start gt Stop gt Analyze to open the capture file in MDI windows e Dynamic Analyze gt Stop MDI windows are automatically opened 4 2 1 12 2 Gateway Capture The second way to capture packets is to use Gateway Capture Usually the network analyzers and WinPcap cannot capture all the packets between 2 devices if the network analyzers or WinPcap are not installed in one of the device because routers would not always broadcast all the communications Gateway Capture is for solving this problem When it is not possible to install WinPcap to one of the communicating pair devices SCU and SCP and the DICOM communication between them should be captured connects the PC that has DICOM Detective installed to the network Then set the SCP IP and port to DICOM Detective Gateway Capture Deamon in the SCU device From the view of SCU device the DICOM Detective Gateway Capture Deamon is a SCP device to replace the original SCP and set the SCP IP and port to the real SCP device in the DICOM Detective Gateway Capture Deamon From the view of SCP device the DICOM Detective Gateway Capture Deamon is a SCU device to replace the original SCU Then when the SCU device sends data the data would be sent to the DICOM Detective G
56. ip of the AND e Use to specify range matching x means gt x x means lt x x y means between x and y Range matching applies to DS DT FL FD IS SL SS TM UL and US Use range matching for FL and FD to avoid mismatch Below table shows matching support for different VR VR Value Matching Range Matching AE String Matching backslash for multiple Not support criteria AS String Matching backslash for multiple Not support criteria AT Format is ggggeeee e g 00100010 Not support backslash for multiple criteria CS String Matching backslash for multiple Not support criteria DA String Matching backslash for multiple e g 2007 20080930 means from criteria 2007 01 01 to 2008 09 30 200805 means less then 2008 05 01 27 DICOM M l Manual of the DICOM Detective Enterprise DS DT FL FD IS LO LT OB OF OW PN SH SL SQ SS ST TM UI UL UN US UT String Matching backslash for multiple criteria String Matching backslash for multiple criteria Float value matching backslash for multiple criteria Double float value matching backslash for multiple criteria String Matching backslash for multiple criteria String Matching backslash for multiple criteria String Matching backslash is deemed as part of the criteria Not support No value means to test if the element exists Not support No value means to test i
57. it VR Little Endian Default Transfer Syntax for DICOM User Information Max Sub Length 32768 Implementation Class 1 2 840 146759 7 119 Implementation Version RADDEM 3 192 168 10 1 1083 lt lt A ASSOCIATE AC lt lt 192 168 10 2 5104 Called Ap Title IMAGE SERVER Calling Ap Title RADDEM 000000 Application Context 1 2 840 10008 3 1 1 1 DICOM Application Context Name Presentation Context ID 1 SOP Classs 1 2 840 10008 5 1 4 1 1 7 Secondary Capture Image Storage Transfer Syntax accepted 1 2 840 10008 1 2 1 Explicit VR Little Endian Presentation Context ID 3 SOP Classs 1 2 840 10008 5 1 4 1 1 6 1 Ultrasound Image Storage Transfer Syntax accepted 1 2 840 10008 1 2 1 Explicit VR Little Endian Presentation Context ID 5 SOP Classs 1 2 840 10008 5 1 4 1 1 3 1 Ultrasound Multi frame Image Storage Transfer Syntax accepted 1 2 840 10008 1 2 1 Explicit VR Little Endian Presentation Context ID T SOP Classs 1 2 840 10008 5 1 4 1 1 6 Ultrasound Image Storage Transfer Syntax accepted 1 2 840 10008 1 2 1 Explicit VR Little Endian Presentation Context ID 9 SOP Classs 1 2 840 10008 5 1 4 1 1 3 Ultrasound Multi frame Image Storage Transfer Syntax accepted 1 2 840 10008 1 2 1 Explicit VR Little Endian User Information Max Sub Length 32768 Implementation Class 1 2 826 0 1 3680043 2 60 0 1 Implementation Version softlink_jdt103 192 168 10 1 1083 gt gt C STORE RQ Ultrasound Image Storage Explicit VR Little Endian gt gt 1
58. k Figure 39 Editing element When double clicking the cell an edit box with the value is provided for editing After entering the value clicking outside the edit box would finish the editing Following rules applies to the value field e Use backslash to separate multi value regardless VR e g 1 0 2 1 for FD Float Double type element e When the VR is UI and the value field is GENERATE UID DICOM Detective would generate an UID to fill the value e When the VR is OB or OW or OF or UN and the value field is filled with an existing file name the binary content of the file would be filled to the value Otherwise the string in the value field would be converted to binary to be filled into the value 34 e If the value is hex number add prefix Ox e g Oxlef3 Only apply to UL US SS and SL elements e For AT element do not add prefix Ox E g 7feQ0010 7fe0001 1 e DICOM Detective provides value explanation with parentheses When editing the value the characters in the parentheses and the parentheses should be removed The menu Edit gt Export Edited Data can export edited data 4 2 2 3 Simulator SCU View Figure 40 is a sample of simulator SCU view ol FilefF DatalD Toolsi Windows Help H x Bur OG FEU Service element Simulator SCU Simulator SCP Connection target IF address A 0 0 1 Part 104 IY Synchronize Joint Connection Joint Connection First Connection Group Order 8 Re
59. l occurrence of the specified tag Includes tag in sequence elements o AccumulateFrame would summary the value of the specified tag usually 0028 0008 Number of Frames and if the tag 1s absent but Pixel Data 7FEO 0010 is present the value of the specified tag is deemed as 1 This is used to calculate frame rates of DICOM transmission User should provide following information to specify a statistics item Tag DICOM element tag to be calculated Label Label to be displayed in the statistics report Statistics Action which calculation should be taken Max Rate s Maximum transmission rate It is used for upper border of historical gram O 0006 User also can specify category for a service to categorize different transmissions in a service E g to categorize storage service with modality so that the statistics report would display the transmission rates for different modality To define the category user must select a service first and enter the category name then hit Add Category button to add the category to the service User must specify the tags to define the category e g Modality 0008 0060 can makes the statistics report categorized with Modality User may Add Update Delete tags and labels to the category label is used for category display in the report User should define Dynamic Statistics sum every time span The time span is used for Summary section of the statistics report Statistics History folder holds
60. le name and hit save Then the DICOM Detective will generate a MergeDPM compatible User Info for the current active view and save it to the file 4 2 1 18 Tools gt Encoding The encoding function is for the DICOM communication that uses special character sets It only applicable to elements with type of SH Short String LO Long String ST Short Text LT Long Text PN Person Name or UT Unlimited Text Reset 25 DICOM By default the system will not use any encoding mechanism It just uses windows default encoding mechanism Use Reset to select windows default encoding e Unicode UTF 8 This function is used to display Unicode UTF 8 special characters e ASCII This function forces the DICOM Detective to display special character sets by DICOM specified ASCII way amp Japanese JIS This function is used to display Japanese JIS special characters amp Japanese Shift JIS This function is used to display Japanese Shift JIS special characters amp Chinese Simplified GB2312 This function is used to display Chinese Simplified GB2312 special characters amp Chinese Simplified GB18030 This function is used to display Chinese Simplified GB18030 special characters amp Korean iso ir 149 This function is used to display Korean iso ir 149 special characters amp Western Europe ISO iso ir 100 This function is used to display Western Europe ISO iso ir 100 special characters
61. listen to a certain port 6 You should set break points and start your CT software use same version and same setting with the debug mode 7 Do exact operation sequence that was done in the customer site to send image to the DICOM Detective simulator SCP 8 Then the DICOM Detective simulator SCP begins to interact with your CT 9 Your CT software will stop at the break point you can trace and debug you source codes Case 3 Advanced Usage of Export and Import Function Suppose that your DICOM print server could not function well with a third part DICOM conforming CT in a customer s site 1000 kilometers away You could not travel to the customer s site in short time to solve the problem Then a service man there captured the DICOM communication by Sniffer Pro 4 5 and sent you the network capture file You opened the capture file with the DICOM Detective and checked the DICOM communication between your DICOM print server and the third part CT You found that the communication is like below The third part CT gt gt A ASSOCIATE RQ gt gt Your DICOM print server The third part CT lt lt A ASSOCIATE AC lt lt Your DICOM print server The third part CT gt gt N GET RQ gt gt Your DICOM print server The third part CT lt lt N GET RSP lt lt Your DICOM print server The third part CT gt gt N CREATE RQ gt gt Your DICOM print server The third part CT lt lt N CREATE RSP lt lt Your DICOM print server The third part C
62. meout It is timeout for connection while performing SCU simulation e General Estimated Reaction Time It is an assumed time span between the communication actions of the opposite peer DICOM Detective assumes that after the DICOM Detective simulator sends a DICOM message to the opposite peer it will take the assumed time for the opposite peer to response e Statistics Setting It bring up the statistics setting dialog Please refer to 4 2 1 13 4 2 1 15 Tools gt Report amp After user selects Report menu the DICOM Detective will popup a Save as dialog user should enter a file name and hit save Then the DICOM Detective will generate a report for the current active view and save it to the file A sample report file is present in Appendixes 4 2 1 16 Tools gt Export DVT Script Hi After user selects Export DVT Script menu the DICOM Detective will popup a Select Folder dialog user should enter a folder name and hit open if it is a no existing folder please answer yes to create the folder Then the DICOM Detective will generate DVT Scripts to the folder for the current active view To use the generated scripts user have to create a DVT project file and a DVT session file and include all generated scripts to the session file 4 2 1 17 Tools gt Export MergeDPM User Info After user selects Export MergeDPM User Info menu the DICOM Detective will popup a Save as dialog user should enter a fi
63. ng time format displayed in the views Note Time format changing is not supported after the views are displayed 1 Sec since beginning of capture ii YYY MM DD HH MM SS M ti Sec since Epoch 1970 01 01 Changing time format in this wizard page would also affects default time format setting of WinPcap capture It means if the time format is change to a certain one next time the WinPcap capture would use the same selection as the default time format Please also refer 4 2 1 12 1 10 DICOM lt gt Manual of the DICOM Detective Enterprise Capture File Capture File G scapfileva cap oe Time Format Sec since beginning of capture From i to is 1 based packet number IY Keep disordered and duplicated packets IY Open directly if only one connection Skip error message Back Cancel Figure 14 Dialog for Setting Start and End Packets 4 After user clicks next button a dialog will be popped up as Figure 15 It displays the available connections User should only select DICOM connections to be analyzed and click next Non DICOM connection may result in unexpected errors This dialog might be skipped by checking Open directly if only one connection in the previous wizard page if there is only one connection to analyze Please select connections i x Connections Please only select DICOM connections you are to analyze confirm with IP and Port select the non DICOM connection may ca
64. nt the connection into connection group 0 The connection 1012 cap 2 became the second connection Order 1 in connection group Q e Third user checked the First Connection check box in connection 1012 cap 3 to make a new connection group group 1 and make the connection 1012 cap 3 as the first connection Order 0 in group 1 e Forth user checked the Joint Connection check box in connection 1012 cap 4 to joint the connection into connection group The connection 1012 cap 4 became the second connection Order 1 in connection group I e 1012 cap 5 is a standalone connection that is not grouped so the group is displayed as underscore e Then 2 groups of connections were made For group 0 if user clicks Begin button of 1012 cap 1 or 1012 cap 2 simulator will start simulation for 1012 cap 1 first and then 1012 cap 2 It is similar for group I 37 e 1012 cap 5 is a standalone connection user can click Begin button to start this simulation 4 2 2 4 Simulator SCP View DICOMDBetective F capfile 1012 cap 4 i x FilefF DatafD Toolsi WindowstWw Help H JF x we G aie PDL Service element Simulator SCU 9 Simulator SCP Connection Setting Run SCU Process mi Port 104 gt EH f Synchronize EE At the end of this process Joint Connection Joint Connection I First Connection Group Order 3 Reset Communication Pack
65. o save the hex data to a file Figure 32 is a sample of the hex data view e For long text data user can click the button to open a text view to display the full text data Figure 33 is a sample of text data view e The binary content of PDU is displayed in the content column click the E button to open a hex view to display the full binary data e Packet number and time is displayed for every PDU in the following format XX SSSSSS SSSSSS yy tttttt tttttt Where e xx is start packet number of the PDU SSSSSS SSSSSS IS start time of the PDU yy is end packet number of the PDU tttttt tttttt 1s end time of the PDU DICOM Detective defines the first packet number as 1 and the first packet time as 0 29 DICOM JL are HL Manual of the DICOM Detective Enterprise DICOMBetective F jcapfilev 1012 cap 4 i alol x FilefF DatalD ToolsiT wWindowsfwW HelpfH _ G xj len Sel PEU Service element Simulatar SCU Simulator SCP Direction Error ASS0OCIATE RQ 98 157 151664 O100000002500001000048495355435020202020202020202 021 An a ae Hex View e 4 A55OCTATE Al 99 187 151925 0200000001760001000048495253435020202020202020202020 oo PDL Type 2 2H g Button Reserved OG q PDU Length 374176H dn ibs Protocol version iiH Reserved 000 Called AE Title HISSCP g Calling AE Title OCWONE Gun ts Reserved 0000000000000000000000000000000000000000000000000000
66. on data into files in the directory Always export connections to different directories importing 2 connections in one directory may result in wrong analysis User can modify the exported binary files using any available tools Export Data only export original communication data It will not export edited data See 4 2 1 11 Export data is managed by files in a directory Only packets related to the current activated connection is exported Packets that are sent received continuously will be combined into one file 14 DICOM 4 2 1 10 Data gt Import Data The modified exported data can be imported into the DICOM Detective as a capture file After user selects Import Data menu the DICOM Detective will popup an Open folder dialog user should select a directory and hit open Then the DICOM Detective will import the communication data and open a MDI window containing 5 views User can do analysis and simulation using the imported data as what he can do for a capture file 4 2 1 11 Data gt Export Edited Data This menu is for saving information for an edited capture file It will only become active when the capture file is changed It acts same as Data gt Export Data menu The difference is Data gt Export Edited Data menu exports changed data but Data gt Export Data exports original data even if the data is changed The exported edited data can be imported using Data gt Import Data
67. or start to simulate SCU connection s at the end of this SCP simulation E g to simulate DICOM storage commitment this choice can be used About connection group e SCP simulator can also do simulation for a group of connections The way to joint connections is same as the way described in section 4 2 2 3 e All connections in a group can only have a same port for the SCP simulator to listen to e The SCP simulator will do simulations for each connection in the group in the sequence of connection jointing e User can combine SCP group simulation function with the Run SCU Process function to make complicated simulations Notice During the simulation do not close any window of DICOM Detective 4 2 2 5 Statistics View Figure 44 shows statistics view It displays the DICOM traffic statistics information report for a capture file The combo box at the bottom is for selecting target to calculate the statistics The configuration of DICOM traffic statistics information 39 DICOM M l Manual of the DICOM Detective Enterprise report is done by using Tool gt Option menu and Statistics Setting button Please refer 4 2 1 13 DICOMDetective G capile Capturez dnm 1 192 168 1 57 1036 lt gt 192 168 1 10 2100 i D x File E Edit E Data D Capture C ToolstT windowsiw HelpiH x C Dea RE POU Service element Simulator SCU Simulator SCP Statistics 192 168 1 52x gt 192 168 1 10 2100 153 940M Bytes in 36 05
68. pen file dialog User should select a DICOM file and hit open Then the DICOM Detective will open a MDI window to show all the DICOM elements inside the DICOM file using a tree list 4 2 1 3 File gt Save Only active when a DICOM file is opened When a DICOM file is opened this menu becomes active When this menu is selected the DICOM Detective would save user changes of the DICOM file in the current MDI window to the original file 4 2 1 4 File gt Save As Only active when a DICOM file is opened When a DICOM file is opened this menu becomes active When this menu is selected the DICOM Detective would popup a Save as file dialog User should select a directory and enter new file name and click save The DICOM Detective would save user changes of the DICOM file in the current MDI window to the specified file This menu would not change the current file to the file saved as 4 2 1 5 File gt Close Close all the MDI windows for the current activated capture file or close an opened DICOM file 4 2 1 6 Edit gt Insert When a DICOM or a capture file is opened you can insert a DICOM element to the file When this menu is selected The menu is only active when an element is selected The menu can also be popped up by right clicking the selected element the DICOM Detective would popup an Insert DICOM Element dialog as Figure 17 12 DICOM M l Manual of the DICOM Detective Enterprise x Tag 00080081 ST Institution Ad
69. plicit VR Big Endian Transfer Syntax Proposed 1 2 840 10008 1 2 Implicit VR Little Endian Default Transfer Syntax for DICOM Presentation Context ID 3 SOP Classs 1 2 840 10008 5 1 4 1 1 6 1 Ultrasound Image Storage Transfer Syntax Proposed 1 2 840 10008 1 2 1 Explicit VR Little Endian Transfer Syntax Proposed 1 2 840 10008 1 2 2 Explicit VR Big Endian Transfer Syntax Proposed 1 2 840 10008 1 2 Implicit VR Little Endian Default Transfer Syntax for DICOM Presentation Context ID 5 SOP Classs 1 2 840 10008 5 1 4 1 1 3 1 Ultrasound Multi frame Image Storage Transfer Syntax Proposed 1 2 840 10008 1 2 1 Explicit VR Little Endian Transfer Syntax Proposed 1 2 840 10008 1 2 2 Explicit VR Big Endian Transfer Syntax Proposed 1 2 840 10008 1 2 Implicit VR Little Endian Default Transfer Syntax for DICOM Presentation Context ID 7 SOP Classs 1 2 840 10008 5 1 4 1 1 6 Ultrasound Image Storage Transfer Syntax Proposed 1 2 840 10008 1 2 1 Explicit VR Little Endian Transfer Syntax Proposed 1 2 840 10008 1 2 2 Explicit VR Big Endian Transfer Syntax Proposed 1 2 840 10008 1 2 Implicit VR Little Endian Default Transfer Syntax for DICOM Presentation Context ID 9 SOP Classs 1 2 840 10008 5 1 4 1 1 3 Ultrasound Multi frame Image Storage Transfer Syntax Proposed 1 2 840 10008 1 2 1 Explicit VR Little Endian Transfer Syntax Proposed 1 2 840 10008 1 2 2 Explicit VR Big Endian Transfer Syntax Proposed 1 2 840 10008 1 2 Implic
70. plicit VR Little Endian Default Transfer Syntax for DICOM lt lt 3 36 110 153 104 134565 2009 09 0 DO mm Command Setitotal 6 0000 0000 4 1019 66 00000042H Group 0000 Length 00000002 Uh 18 1019 1 2 840 10008 1 1 Verification SOP Class Affected SOP Class UID 00000100 US 2 1013 8030H C ECHO RSP Command Field 0000 0120 US 2 1019 1 0001H Message ID Being Responded To ANNAN ARANY flict 4 11 MINH NS Mata S t io Pracantil Nata Cat Tyna gt Figure 25 Text Dump Clear button clears the current displaying log Checking Pause Dumping check box would pause the log display un checking it would continue the log display View Dumped Text Files would bring up an open file dialog you can select a log file and open it with notepad To do Dynamic Statistics or Text Dump l pA User should select a network Interface or network card to capture the packets DICOM Detective can gather statistical traffic information from remote interface using WinPcap Remote button is used to get remote network interfaces please refer 4 2 1 12 1 for how to get remote network interfaces Interface Info IP displays the IP of the current selected network interface The area below the IP displays the current network interface information e g configuration information like speed duplex 100M 10M etc It would display all the information of the current network interface in a tool tip box if the mouse is moved over this area S
71. put path must be a path that the output files would be generated in e For DVT script o If the input path is a file name the output path must be a path that the output files would be generated 40 DICOM in o If the input path is a folder name the output path must be a path that the output files would be generated in Export text dump At least one of t ed em should be specified Export DVT script At least one of t ed em should be specified Export merge DPM user info At least one of t ed em should be specified Silent mode No popup dialog Verbose mode 41 DICOM Appendix A Examples of Simulator Function Usages Case 1 Simulator SCU Suppose that your DICOM archive server could not function well with a third part DICOM conforming CT in a customer s site 1000 kilometers away You could not travel to the customer s site in short time to solve the problem Then a service man there captured the DICOM communication by Sniffer Pro 4 5 and sent you the network capture file You opened the capture file with the DICOM Detective and checked the DICOM communication detail between your DICOM archive server and the third part CT You found that the communication is like below The third part CT gt gt A ASSOCIATE RQ gt gt Your DICOM archive server The third part CT lt lt A ASSOCIATE AC lt lt Your DICOM archive server The third part CT gt gt C STORE RQ gt gt Your DICOM archive server
72. r Connection target IP address t r Dos D 27 Port 104 IV Synchronize Joint Connection IV Joint Connection I First Connection Group Order fia Reset Communication Packages Save As Fe F capfile 1012 cap 2 lO x Received PDU Service element Simulator SCU Simulator SCP m Connection target Sent IP address 127 0 0 1 Port 104 IV Synchronize Joint Connection eee IV Jgint Connection I First Connection Group Order fos Reset Communication Packages Save As Co F capfile 1012 cap 5 BE ol xd Received ie PDU Service element Simulator SCU Simulator SCP Sent pi M Connection target IPaddress 127 0 0 1 Port 104 IV Synchronize Joint Connection Joint Connection I First Connection Group Order 4 Reset Communication Packages Save As entinue Received fen Sent wa m IP Address 192 168 0 150 Port 132882 q E IP Address 192 168 0 230 Port 11024 i n Figure 41 Example of Jointing Connection Figure 41 is an example of how jointing connections works e First user checked the First Connection check box in connection 1012 cap 1 to make the connection group 0 and make the 1012 cap 1 as the first connection Order 0 in group 0 e Second user checked the Joint Connection check box in connection 1012 cap 2 to joi
73. r il Capture pe I SN To find problems of SCU peer SOP Peer a Er i SCP Simulator SCP Peer ey A SCU Peer mmm mm iw gt gt ee CS Figure 8 DICOM Detective Usage Figure 8 shows the Usage of DICOM Detective Usually the service man gets the network capture data or sometimes called network sniffer data onsite and send the capture data to programmers or consultants for analyzing offsite Following is three main functions of the DICOM Detective that the user can use to analyze the DICOM communication e The DICOM Detective takes network capture data captured by a supported network analyzer or a DICOM file as input It parses the DICOM information from the inputted capture data or DICOM file and presents the information in a readable format through the DICOM Detective user interface This DICOM information can then be used to find the problems in the DICOM communication e By using the capture data the DICOM Detective can also simulate DICOM communication peers by simulating their input and output It can reproduce the DICOM communication by interacting with one of the DICOM communication peer This means after getting the capture data and using the DICOM Detective simulator DICOM communication problems can be reproduced without one of the DICOM communication peers This is helpf
74. rprise button to skip receiving the data and accelerate the simulation End button is used to stop the simulation About connection group Simulation can be done by a single connection or a group of connections User can use controls in Joint Connection group box to joint deferent connections displayed in deferent MDI windows into one group Then the simulator will do simulation sequentially for the grouped connections in the order of connection jointing The function of grouping connections is used to simulate DICOM communications of which that the time sequence is sensitive E g to store images some DICOM implementation sends C ECHO ahead of C STORE to verify the network and C ECHO and C STORE are usually done in 2 different connections To simulate this user needs to joint these two connections into one group and then DICOM Detective will do simulations continuously for user Do the C ECHO first then C STORE Following is the way to joint connections into groups and disjoint connections e User should check the First Connection check box to create a new connection group and make the connection the first connection in the group e User should check the Joint Connection check box to joint the connection into the last created connection group e The group number and the connection order is displayed in the format of group order where group is 0 base integer to distinguish different groups and order is also 0 based integer to indi
75. set Communication Packages Save As Received O O f Sent f m IP Address 192 168 0 150 Port 132861 gt EN Address 192 166 4 Progress bar Begin Eontinue End Figure 40 Sample of Simulator SCU View User should enter the IP address and Port of the destination SCP that is about to be tested IP address and port may not be same with what is displayed in the status bar but the IP address must be the IP address of the destination SCP and the port must be what the destination SCP is listening to Synchronize is use to synchronize the IP address and Port all connections with Synchronize checked in a connection group will have the same IP address and Port The connection group will be introduced afterward If user enters the file path for Communication Packets Save As Received or and Sent the received and or sent packets during the simulation will be saved to the corresponding files binary file Often time user can leave this field empty It is for users who want to know details of the network communication for the simulation User should click Begin button to start simulation If the simulation starts the progress bar will indicate the simulation progress and message bar under the progress bar will show simulation messages If the simulator pauses while simulation it is waiting for data from the other communication peer user can click Continue 35 DICOM M l Manual of the DICOM Detective Ente
76. statistics history files generated by dynamic statistics function User may define the folder Max TCP IP Rate Bytes sec defines maximum TCP IP transmission rates It is used for upper border of historical gram Refresh Statistics Screen every time span defines the time span to refresh the dynamic statistics report screen Zero means refresh the 23 4 DICOM report immediately 1 means never display the statistics report just collects the statistics history file Option setting X General setting DICOM Dictionary C Program Filez DICOM TookDICOM Detectives DCM Port Name Dictionary C Program Files DICOM TookDICOM DetectiveXPorth 0 DICOM Image Viewer C Program Files HUGA Dane Version 4 1440 sins exe on DICOM SA viewer C Program Files DICOM ToohSR BrowserSRBrowzel DWYT SOP Definition CA Program Filez DICOM TookDICOM Detective DWT ie Verify DICOM Tag VR VM and Value Length I Auto Encoding Simulator Setting SCP Default Port fi U4 SCP time out fi O00 MS SCU time out fi O00 MS General Estimated Reaction Time f O00 MS Statistics Setting Cancel Figure 28 Option Dialog 2 1 14 Tools gt Option User can change DICOM Detective settings by clicking Option menu Figure 28 shows the option settings DICOM Dictionary The path of the DICOM dictionary file The system default DICOM dictionary file is DCMDict txt Port Name Dictionary The path of port name dictionary file T
77. tactistics Dumping Taget IP is to define which IP you want to gather statistical traffic information from dump text from Stactistics Dumping Taget Port is to define which port you want to gather statistical traffic information from dump text from This field can be empty and then it means all ports would be involved for statistical traffic information gathering text dumping The Port field can be entered with not and and or key words E g 104 or 6104 or 7104 means gathering statistical traffic information dumping text for ports 104 6104 and 7104 not 2002 and not 80 means gathering statistical traffic information dumping text for all ports except 2002 and 80 Stactistics Dumping Taget Additional Filter is to define additional capture filter the filter follows the WinPcap filter rules and the filter would be jointed to the internal filter with keyword and E g host 192 168 0 1 means gathering statistical traffic information dumping text from host 192 168 0 1 WinPcap would generate packets between remote host and local host for remote capturing When capturing DICOM communication between remote 21 DICOM hosts checking Stactistics Dumping Taget Exclude local IPs for remote capture would avoid capturing those packets WinPcap generated 8 Max Buffer defines maximum buffer size used for DICOM data analysis 9 You can choose to do Statistics Text Dump or Statistics and Text Dump by sel
78. tion of it may result in severe civil and criminal penalties and will be prosecuted to the maximum extent possible under law Figure 1 Installation Step 1 ji DICOM Detective Setup License Agreement You must agree with the license agreement below to proceed NOTICE DICOM Tool Inc licenses the software to you only upon the condition that you accept all of the terms contained in this license agreement Please read the terms carefully before continuing installation as pressing the yes button will indicate your assent to them If you do not agree to these terms please press the no button to exit install as DICOM Tool is unwilling to license the software to you in which event you should return the full product with proof of purchase to the dealer from whom it was acquired within thirty days of purchase and your money will be refunded LICENSE AND WARRANTY The software which accompanies this license the Software is the property z me TsessssessrsessssssssssssesssessssssssssesssnesTrsssesesssssssesesset do not accept the license agreement Reset lt Back Cancel Wise Installation Wizard Fi Figure 2 Installation Step 2 DICOM I D gt DU Manual of the DICOM Detective Enterprise fie DICOM Detective Setup Jo User Information Enter the following information to personalize your installation Installer will not proceed without authorized user information no warning is given Ask servi
79. to the customer s site in short time to solve the problem Then a service man there captured the DICOM communication by Sniffer Pro 4 5 and sent you the network capture file You opened the capture file with the DICOM Detective and checked the DICOM communication detail between the third part DICOM archive server and your CT You found that the communication is like below gt The importance to make the simulator works is that you must use the same version software also same settings to interact with the DICOM Detective 42 DICOM Your CT gt gt A ASSOCIATE RQ gt gt The third part DICOM archive server Your CT lt lt A ASSOCIATE AC lt lt The third part DICOM archive server Your CT gt gt A ABORT gt gt The third part DICOM archive server You checked every communication detail using PDU view and Service Element View and found that neither your CT nor the third part archive server violated the DICOM standard But you do not know why you CT sent an A ABORT instead of a C STORE RQ after receiving an A ASSOCIATE AC since the third part DICOM archive server accepted the abstract syntax and transfer syntax your CT proposed Then you need to debug your CT software with the DICOM Detective To debug you CT software 1 Setup the network environment 2 Open the capture file with the DICOM Detective 3 Switch to the Simulator SCP view 4 Enter a port number 5 Press start then the Simulator SCP daemon can
80. ul for programmers to trace and debug their DICOM communication programs without traveling to locale e DICOM Detective calculates the DICOM traffic statistics and display the Statistics report for a capture file or dynamically makes the statistics report while capturing The statistics report can be used to evaluate the DICOM network performance DICOM Detective provides 5 views for a DICOM association 4 1 1 PDU View The PDU view gives a view of the PDUs used in the association DICOM PDUs include A ASSOCIATE RQ A ASSOCIATE AC A ASSOCIATE RJ P DATA TF A RELEASE RQ A RELEASE RP and A ABORT DICOM Detective shows the Network capture data or sometimes called network sniffer data will be abbreviated as capture data in the following context DICOM JL are EL Manual of the DICOM Detective Enterprise details of these PDUs for both requesting application and accepting application using a tree list in time sequence Figure 9 is an example of PDU view DICOMDetective G capfile 10bT capture adr1000 and AGFA 4500 cap 19216004 File E Edit E Data D Capture C Tools D windowst Help H elie l n 10 x x POU Service element Simulator SCU Simulator SCP Statistics Direction ER P DATA TF 9 1 879303 9 1 87930 i PDU Type Reserved PDU Length Presentation Data value Items Tot Presentation Data Value 3 Item Length z Presentation Context ID Message Header i
81. unications and extracts the DICOM communication information and translates the communication information into text files so that the text files can serve as DICOM communication log Figure 25 shows Text Dump user interface 20 DICOM M l Manual of the DICOM Detective Enterprise Interface 2 DeviceiNPF_ ABOC3A6A 5013 4730 A7E4 70AA67BBEBE3 Broadcom Netxtreme Gigabit Ethernet Driver Microsoft s Packet E Dynamic Statistics and Text Dump 2009 09 07 14 25 17 gt 2009 09 07 14 52 12 oj xi Interface Info Statistics Dump Taget fo Ex 104 or 6104 or 7104 Max Buffer 1024 M IP 192 168 1 3 IP Porttempty Ok 104 empty OK Ex not 2002 and not 80 Text Dump Setting Locally Administered Address anime maA pes Speed Duplex Auto Additional Filter Ex host 192 168 0 1 M for remote capture statistics Setting Statistics and Text Dump Stan New text dumped 2 association s leftto analyze Statistics Text Dump View Dumped Text Files m Pause Dumping Clear Text Dump a Command Seti total 5 0000 00003 UL 4 1601 56 00000038H Group 0000 Length 00000002 Uh 18 101 1 2 840 10008 1 1 Verification SOP Class Affected SOP Class UID 0000 0100 Us 2 1601 0030H C ECHO RG Command Field 0000 0110 Us 2 1601 1 0001H Message ID 00000800 Us 2 101 0101H No Data Set is Present Data Set Type 3 36 10 140 1358 lt lt C ECHO RSP Verification SOP Class Im
82. use unexpected result SCUIP Sourceport SCPIP 192 168 1 151 cisco a 104 acr nema 2737 cisco a 192 168 1 152 445 microsof lt gt 192 168 1 151 2237 cisco auxity vty p lt Back Cancel Figure 15 Dialog for Selecting Connection 5 After user clicks finish button the DICOM Detective may popup error messages for bad connections like Figure 16 and user can choose OK to continue or Cancel to stop analyzing the file The error message dialog can be skipped by checking Skip error message in the first wizard page 11 DICOM M l Manual of the DICOM Detective Enterprise lolx AAssociateRQ can not be read start pack number 3 end pack number 3 Unexpected PDU Item type 0x00 Unexpected PDU Item type 0x00 Unexpected PDU Item type 0x00 Unexpected PDU Item type 0x00 unknown item 1 for A amp ssociateRQ ignore 16842684 bytes of AAssociateRQ AAssociateRQ can not be read start pack number 11 end pack number 1367 ME Error occurs while extracting PDUs vill Cancel Figure 16 Error message dialog 6 After user clicks finish button for Please select connections dialog and or OK button for error message dialog A MDI window containing 5 views will be opened for each DICOM connection Details of 5 views will be described in section 4 2 2 4 2 1 2 File gt Open a Dicom Filed After user selects Open a Dicom File menu the DICOM Detective will popup an O
83. ve server Image viewer gt gt C ECHO RQ gt gt The third part DICOM archive server Image viewer lt lt C ECHO RSP lt lt The third part DICOM archive server Image viewer gt gt A RELEASE RQ gt gt The third part DICOM archive server Image viewer lt lt A RELEASE RP lt lt The third part DICOM archive server Connection 2 The image viewer sent C MOVE to the archive server to retrieve image Image viewer gt gt A ASSOCIATE RQ gt gt The third part DICOM archive server Image viewer lt lt A ASSOCIATE AC lt lt The third part DICOM archive server Image viewer gt gt C MOVE RQ gt gt The third part DICOM archive server Image viewer lt lt C MOVE RSP lt lt The third part DICOM archive server 44 DICOM Image viewer lt lt C MOVE RSP lt lt The third part DICOM archive server Image viewer gt gt A RELEASE RQ gt gt The third part DICOM archive server Image viewer lt lt A RELEASE RP lt lt The third part DICOM archive server Connection 3 The archive server sent the C ECHO to the image viewer to verity network for image storage The third part DICOM archive server gt gt A ASSOCIATE RQ gt gt Image viewer The third part DICOM archive server lt lt A ASSOCIATE AC lt lt Image viewer The third part DICOM archive server gt gt C ECHO RQ gt gt Image viewer The third part DICOM archive server lt lt C ECHO RSP lt lt Image viewer The third part DICOM archive server gt gt A RELEASE

Manual of the DICOM Detective Enterprise

Contents

Download Pdf Manuals

Related Search

Related Contents