> > vss should be complete mem (shared and swapped) rss should be resident mem > > (without swap). > > spamd and httpd are sums of all childerns (plus one grep instance;) > > But part of this memory is shared between the children, isn't it?
not sure:) but i believe most of mem is used by some tokens data individual for each spamd, while the actual shared code and libs will be rather small. there was some flag for ps to show shared memory iirc. however the main point was to find correlation between black curve and other curves. now i see we have 3 spamd, so lets wait what will happen when some swap crisis will come again. pavel