no worries.

what are you intentions for this??? the reason i ask is if you are simply trying to monitor these devices... use opennms or openview. these can help spot when a server goes down as a result of a panic/fault or a human initiated reboot/shutdown. but just because a panic happens does not mean the system will reboot. just recently we had a system reboot itself (it was seen on OV). the system did not panic. in fact it was a kern.info. and then the system came down on signal 15 (a simple exit and no core dump). on another box we actually rebooted it. again, signal 15. so i think it might be hard to differentiate between a human reboot and a fault induced reboot. also, if the signal permits, a core dump will be generated giving you a good idea that the system just crashed.

also, i believe a proper shutdown should terminate syslogd correctly. this will say its coming down on signal 15. if you look in your logs and find the output of `uname -a` in the log files and a gap in your log files... most likely it was a crash/reboot or something a long those lines.