Can any tell me the exact difference between cookie and session

I know that Session tracking is dealt with 3 concepts
1. Cookies
2. Url rewriting
3. hidden fields

and we r creating a HttpSession session=req.getSession(true)
is it session or cookie
and after creating this, where is it stored( either in webservet or client m/c)