right order:  Init is done first to last "inifin", Fini is done
in opposite order, last to first.

This replaces the several ad-hoc facilities we had.

random bits of memory to each other.

I have added a "len" field to the vmod_priv structure and used that
for BLOB's.

We may need some memory-mgt beauty/convenience functions for this.

A new parameter, $ban_lurker_age, sets a minimum age bans must
have before the lurker will touch them.  This way the lurker
stays out of the "rush" that happens right after a ban has been
added.

Another new parameter, $ban_lurker_batch, determines how many
objects the lurker will examine, before it takes a $ban_lurker_sleep
in order to not monopolize CPU.

duplicated bans while it runs.

Stumbled on by:	scoof
Fixes #1390

Spotted by: 	martin

Eliminate some dead code and make sure that the tail-pruner runs,
also when the lurker is busy.

it basically didn't work as intended any more.

output.

Fixes: #1381

lurker can actually make useful determinations on "mixed" bans.

VCL_Error SLTs.

This causes a change of syntax for the vcc file, it is however
very slight:  "Module", "Init", "Function", "Object" and "Method" needs
a "$" prefix, and the methods refer to the previous $Objecet without
the enclosing { }.

The first contiguous set of lines starting with "#" is treated as
a copyright notice, and emitted last, unless the first line is "#-"

Fix the end of log record pointer to not include the record
terminating null char. This caused the null to be part of the captured
fragments and sent to the output.

Fixes: #1382

Fix wrong argument order for isprefix() when picking the Host
header. This caused the header to never be matched.

Fixes: #1383

Spotted by:	Scoof (first) and Coverity (second)

{local|remote}.ip for PROXY support, we do not want to waste 16 bytes
extra on pointers, so put all the {client|server|local|remote}.ip into
a single array -- which is unfortunately complicated by the opaqueness
of struct vsa.

With 8 byte pointers, having a char[X] for X <= 8 is cheaper than
than a char *.

Don't waste 32bits on the overflow flag.

accept-filters

This saves approx 50 bytes of storage for the session structure
and puts us comfortably below 256 bytes, at least i the IPv4 case.