A new parameter, $ban_lurker_age, sets a minimum age bans must
have before the lurker will touch them.  This way the lurker
stays out of the "rush" that happens right after a ban has been
added.

Another new parameter, $ban_lurker_batch, determines how many
objects the lurker will examine, before it takes a $ban_lurker_sleep
in order to not monopolize CPU.

duplicated bans while it runs.

Stumbled on by:	scoof
Fixes #1390

Spotted by: 	martin

Eliminate some dead code and make sure that the tail-pruner runs,
also when the lurker is busy.

it basically didn't work as intended any more.

output.

Fixes: #1381

lurker can actually make useful determinations on "mixed" bans.

VCL_Error SLTs.

This causes a change of syntax for the vcc file, it is however
very slight:  "Module", "Init", "Function", "Object" and "Method" needs
a "$" prefix, and the methods refer to the previous $Objecet without
the enclosing { }.

The first contiguous set of lines starting with "#" is treated as
a copyright notice, and emitted last, unless the first line is "#-"

Fix the end of log record pointer to not include the record
terminating null char. This caused the null to be part of the captured
fragments and sent to the output.

Fixes: #1382

Fix wrong argument order for isprefix() when picking the Host
header. This caused the header to never be matched.

Fixes: #1383

Spotted by:	Scoof (first) and Coverity (second)

{local|remote}.ip for PROXY support, we do not want to waste 16 bytes
extra on pointers, so put all the {client|server|local|remote}.ip into
a single array -- which is unfortunately complicated by the opaqueness
of struct vsa.

With 8 byte pointers, having a char[X] for X <= 8 is cheaper than
than a char *.

Don't waste 32bits on the overflow flag.

accept-filters

This saves approx 50 bytes of storage for the session structure
and puts us comfortably below 256 bytes, at least i the IPv4 case.

Spotted by: c0004x.vtc on slow machines.