We have dozens of DICOM modalities that send to a NetScaler, which distributes the inbound Associations among four DICOM routers in front of our VNA. On any given day, for any given modality location, we can experience slowness in the delivery of a radiology exam to the routers.
We have placed Wireshark on each of the four routers - but alas, the source IP is that of the NetScaler, and not the originating IP of the modality. And, we're told the IP of the modality cannot be spoofed to the routers. Consequently, we can't discriminate good traffic, from bad - we can't filter on the source of the troublesome data.
What's puzzling is that the management application on the routers reports the Originating AET of the modality; it's IN the inbound data to the router. But, as far as I know - Wireshark has no provision for filtering on Orig AET. Am I missing something? Is there another way to achieve my objective?
adTHANKSvance, Dan