Seems to me, you could stat, and then read the last 30 bytes, decode them, and if the file is complete (process has stopped logging and is sleeping again), copy the file and then process the copy (so it doesn't get truncated while you're parsing)