[plug] TCP connections refused [rootkit]

[Ryan]

On Mon, 5 May 2003 18:39:14 +0800
Derek Fountain <derekfountain at yahoo.co.uk> wrote:

> On Monday 05 May 2003 16:49, Ryan wrote:
> > If the hard drive
> > is mounted on another Linux machine as the non primary disk, nothing can be
> > read from it, fsck checks out fine on 5 pass runs, but the data can only be
> > seen if the drive is booted on its own accord.
> 
> Anyone know how it does that trick?

I should be more specific.  It mounts, then anything you do to it produces pages and pages of directory sync errors IIRC.  I'll fire it up again tomorrow if I can and tell you exactly what it does.  You can sometimes get a directory listing, but cannot access any files.

Are you querying because you have seen the same thing and are curious, or because you believe that I didn't do anything else wrong and it really was making the data inaccessibe and simply wanted to know how? :)

Ryan