dupespotter: handle most kinds of session IDs