daemon user

[MoreFeo]

Hi, we had some problem with a server starting paging a lot (almost 100% of 14GB paging space) and we've seen that the problem was a process run by user daemon, 'ps aux' showed it was taking 85% of mem. This process PPID was 1.
How can we see where and how this process started, and why it's run by user daemon?

Thanks.

 

[cts123]

How about the output of this command?

Displaying the top 10 memory-consuming processes
=================================================
# ps aux | head -1; ps aux | sort -rn +2 | head -10

Regards,

-Sam