I suppose you meant the client IP address might get changed while the session cookie is kept by the client agent, right?
All I actually need is to record the most recently seen client IP address, in order to write an audit log including <timestamp, username, ip-address>.
Of course, it would be much better to have a sane API for querying the client "current" IP address.