[calorie]

I'm not talking about how bots show up in the who's online list. The only place in the vB code where I see sessions removed for bots is in the sessions.php file:

PHP Code:

// automatically determine whether to put the sessionhash into the URL
if (sizeof($_COOKIE) > 0 OR preg_match("#(google|slurp@inktomi|yahoo! slurp)#si", $_SERVER['HTTP_USER_AGENT']))
{
    // they have at least 1 cookie, so they should be accepting them
    $nosessionhash = 1;
    $shash = $session['sessionhash'] = '';
    $surl = $session['sessionurl'] = '';
    $surlJS = $session['sessionurl_js'] = '';
}
else
{
    $nosessionhash = 0;
    $shash = $session['sessionhash'];
    $surl = $session['sessionurl'] = 's=' . $session['sessionhash'] . '&';
    $surlJS = $session['sessionurl_js'] = 's=' . $session['sessionhash'] . '&';
} 


If I would have had msnbot in the preg_match statement initially, msnbot would not have had SIDs in the requests.

Because msnbot was not in the preg_match statement, msnbot had SIDs in all requests until I applied this hack.

Please check this thread. Maybe it explains it better than I can.

BTW, are you checking your raw server access logs? I don't see how putting msnbot in vBoptions removes the SID from requests.