In the case of protocols where there is no concept of a

session layer (e.g. UDP) or where sessions at the sessionlayer are generally very short-lived (e.g. HTTP), virtual

sessions are implemented by having each exchange between the

user and the remote host include some form of cookie which

stores state (e.g. a unique session ID, information about the

user's preferences or authorisation level, etc.).