Q:

How to find which process is responsibile for a RAM burst?

my VPS just ran out of RAM and I was forced to reboot it since I wasn't even able to ssh in.
My question is where should I look at (logs, etc) to find out which process was responsibile for the RAM burst?
Thanks.

A:

Unless you see something in /var/log/messages (or some other file in /var/log - look around)  you blew your chance: By rebooting you destroyed any state information your system had, and now you need to wait for the problem to happen again.
If you suspect a RAM leak I suggest monitoring your RAM/Swap usage and noting any processes that appear to be growing over time.

