Check out chapter 9 of Marty Halls Core Servlets &
JSP book at
www.coreservlets.com Remember that if cookies are not disabled the servlet will use cookies for session tracking. It switches to URL-rewriting (if you coded for it), only if cokies are disabled.