[rescue] swap slowly filling up on solaris 8 machines

[Brian Hechinger]

i've been pointed at two boxes at work that have raised some concern among some
people here.  these machines are not doing a huge amount of work, nor are they
running a lot of different things, but they are consuming a tremendous amount
of swap.  is there a way to dig through the swap and see what's been placed
there?  has anyone else seen this?  i can't explain it, it seems very odd to me.
i don't see anything that should be consuming all this space.

machine1:

  6:48pm  up 79 day(s), 17:36,  1 user,  load average: 0.04, 0.04, 0.21
27 processes:  25 sleeping, 1 running, 1 on cpu
Memory: 512M real, 24M free, 556M swap in use, 469M swap free
SunOS va2-sssprx2 5.8 Generic_108528-07 sun4u sparc SUNW,UltraAX-i2

machine2:

  6:48pm  up 96 day(s), 10:27,  1 user,  load average: 0.01, 0.03, 0.16
27 processes:  26 sleeping, 1 on cpu
Memory: 512M real, 31M free, 773M swap in use, 252M swap free
SunOS va2-sssprx1 5.8 Generic_108528-07 sun4u sparc SUNW,UltraAX-i2

ps -ef from machine1:

     UID   PID  PPID  C    STIME TTY      TIME CMD
    root     0     0  0   Aug 22 ?        0:13 sched
    root     1     0  0   Aug 22 ?        3:11 /etc/init -
    root     2     0  0   Aug 22 ?        0:01 pageout
    root     3     0  0   Aug 22 ?       218:39 fsflush
    root   246     1  0   Aug 22 ?        0:00 /usr/lib/saf/sac -t 300
    root   225     1  0   Aug 22 ?        0:00 /usr/lib/utmpd
    root    58     1  0   Aug 22 ?        0:02 /usr/lib/sysevent/syseventd
    root    60     1  0   Aug 22 ?        0:02 /usr/lib/sysevent/syseventconfd
    root   141     1  0   Aug 22 ?        0:00 /usr/sbin/inetd -s
    root   249   246  0   Aug 22 ?        0:00 /usr/lib/saf/ttymon
    root   150     1  0   Aug 22 ?        0:17 /usr/local/sbin/sshd -f /usr/local/etc/sshd_config
bheching 15393 15374  0 18:39:32 pts/1    0:00 -ksh
    root   206     1  0   Aug 22 ?        1:43 /usr/lib/inet/xntpd
    root   166     1  0   Aug 22 ?        0:04 /usr/sbin/syslogd
    root   181     1  0   Aug 22 ?        6:03 /usr/sbin/cron
  nobody  6863  9506  0   Nov 23 ?        1:00 /usr/local/apache/bin/httpd -DSSL
  nobody  5285  9506  0   Nov 23 ?        1:03 /usr/local/apache/bin/httpd -DSSL
  nobody  6759  9506  0   Nov 23 ?        0:59 /usr/local/apache/bin/httpd -DSSL
    root 26297     1  0   Nov 21 console  0:00 /usr/lib/saf/ttymon -g -h -p va2-sssprx1 console login:  -T sun -d /dev/console
  nobody 13803  9506  0 17:14:17 ?        0:04 /usr/local/apache/bin/httpd -DSSL
    root 15374   150  0 18:39:27 ?        0:00 /usr/local/sbin/sshd -f /usr/local/etc/sshd_config
  nobody 24534  9506  0 20:08:15 ?        0:33 /usr/local/apache/bin/httpd -DSSL
  nobody  4751  9506  0   Nov 23 ?        1:02 /usr/local/apache/bin/httpd -DSSL
  nobody  7225  9506  0   Nov 23 ?        1:00 /usr/local/apache/bin/httpd -DSSL
    root 15615 15393  0 18:52:45 pts/1    0:00 ps -ef
  nobody  8734  9506  0   Nov 23 ?        0:59 /usr/local/apache/bin/httpd -DSSL
  nobody  7226  9506  0   Nov 23 ?        1:01 /usr/local/apache/bin/httpd -DSSL
  nobody  7519  9506  0   Nov 23 ?        1:01 /usr/local/apache/bin/httpd -DSSL
    root 16976     1  0   Nov 15 ?        0:33 /opt/EMPsysedge/bin/sysedge -b -p 6325
    root  9506     1  0   Oct 16 ?        0:04 /usr/local/apache/bin/httpd -DSSL

any ideas?  where to look?  what to do?  i'm stumped!

-brian