From: Eric Leblond <eric@regit.org>
Date: Fri, 17 May 2019 18:01:36 +0000 (+0200)
Subject: doc: update ebpf doc following bypass_filter change
X-Git-Tag: suricata-5.0.0-rc1~320
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8a11581ac88b5f9cf4251ad3de875148e5ef9694;p=thirdparty%2Fsuricata.git

doc: update ebpf doc following bypass_filter change
---

diff --git a/doc/userguide/capture-hardware/ebpf-xdp.rst b/doc/userguide/capture-hardware/ebpf-xdp.rst
index a8895a73cf..c7e055b3c6 100644
--- a/doc/userguide/capture-hardware/ebpf-xdp.rst
+++ b/doc/userguide/capture-hardware/ebpf-xdp.rst
@@ -195,6 +195,9 @@ filter must expose `flow_table_v4` and `flow_table_v6` per CPU array maps with s
 as the one available in `bypass_filter.c`. These two maps will be accessed and
 maintained by Suricata to handle the lists of flow to bypass.
 
+If you are not using vlan tracking (``vlan.use-for-tracking`` set to false in suricata.yaml) then you have also to set
+the VLAN_TRACKING define to 0 in ``bypass_filter.c``.
+
 Setup eBPF load balancing
 -------------------------