two questions

Hello again,
this time two naive questions:

1) I use my own "onlyscan.bro" policy file: