yea that's a good question !

why parsing the whole logfiles on startup, what is when fail2ban must 
parse 5 x 2Gb logfiles ? but ok

i'll change this !


Am 28.04.2013 16:30, schrieb Yaroslav Halchenko:
>
> In server/datetemplate.py:
>
> > @@ -218,3 +218,15 @@ def getDate(self, line):
> >  			value = dateMatch.group()
> >  			date = list(iso8601.parse_date(value).timetuple())
> >  		return date
> > +
> > +
> > +class DateASSPlike(DateTemplate):
> > +
> > +	def __init__(self):
> > +		DateTemplate.__init__(self)
> > +
> > +	def getDate(self, line):
> > +		# there is no need to parse the date.
> > +		# ASSP doesn't buffer the log output.
> > +		return MyTime.gmtime()
>
> what if we are parsing the file upon start up -- we shouldn't rely 
> just on current time. and I do not see why specifically for ASSP?
>
> we might like to have a feature to not use timestamps from files at 
> all, but that is once again -- it would be generic option, I do not 
> see why it should be done here (in this PR).
>
> —
> Reply to this email directly or view it on GitHub 
> <https://github.com/fail2ban/fail2ban/pull/193/files#r3991513>.
>