well, DDOS sends many http requests or in other words flood them, but recently websites with high end cache controls dump the SESSID immediately that's why it's not very useful really XD    in my opinion, DDOS are tools to distract the server. they distract them to redirect their attention so other attacks can penetrate