Ask Your Question

How can I extract the DICOM headers of files from a capture of traffic?

asked 2020-03-26 18:27:59 +0000

daje gravatar image

updated 2020-03-26 21:46:39 +0000

Guy Harris gravatar image

I have pcap files with DICOM protocols, is it possible to read the content of the packet and extract the DICOM header of the file sent in the network? What I don't understand is if I can recover the file content from the packed information. Is this information stored in the packet bytes pane?

edit retag flag offensive close merge delete


Hi daje, any luck on this? I am trying to find the file header as well to reassemble the DICOM file. Have you figure it out?

You are able to recover the file contents, that you can see clearly in wireshark, but the problem is it requires a file header. You have to write some kind of script in order to export it with a file header for sure, either an empty one or the original file header that is in the original packet, which I am wondering how to find it.

qasim gravatar imageqasim ( 2020-05-15 09:31:06 +0000 )edit

1 Answer

Sort by » oldest newest most voted

answered 2020-03-26 20:25:40 +0000

Jaap gravatar image

Have a look in the File menu, under Export Objects. There you'll find the option to export DICOM objects.

edit flag offensive delete link more


Hi! Thanks, the export is working, but the file is kind of corrupt, I can't open it. Is it normal that on export I only have one file of content type: "command"?

daje gravatar imagedaje ( 2020-03-27 09:54:07 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools



Asked: 2020-03-26 18:27:59 +0000

Seen: 722 times

Last updated: Mar 26 '20