diff --git a/doc/userguide/capture-hardware/ebpf-xdp.rst b/doc/userguide/capture-hardware/ebpf-xdp.rst index 710adb38a5..96c45d3e65 100644 --- a/doc/userguide/capture-hardware/ebpf-xdp.rst +++ b/doc/userguide/capture-hardware/ebpf-xdp.rst @@ -97,7 +97,8 @@ To get Suricata source, you can use the usual :: ./autogen.sh -Then you need to add the ebpf flags to configure :: +Then you need to add the ebpf flags to configure and specify the Clang +compiler for building all C sources, including the eBPF programs :: CC=clang ./configure --prefix=/usr/ --sysconfdir=/etc/ --localstatedir=/var/ \ --enable-ebpf --enable-ebpf-build @@ -108,7 +109,12 @@ Then you need to add the ebpf flags to configure :: sudo mkdir /etc/suricata/ebpf/ The ``clang`` compiler is needed if you want to build eBPF files as the build -is done via a specific eBPF backend available only in llvm/clang suite. +is done via a specific eBPF backend available only in llvm/clang suite. If you +don't want to use Clang for building Suricata itself, you can still specify it +separately, using the ``--with-clang`` parameter :: + + ./configure --prefix=/usr/ --sysconfdir=/etc/ --localstatedir=/var/ \ + --enable-ebpf --enable-ebpf-build --with-clang=/usr/bin/clang Setup bypass ------------