simple sort to show which application is using the most memory.
ps -elf | awk '{print $10, $3, $4, $15, $16}'| sort -nr | head
572923 mysql 1246 /usr/libexec/mysqld --basedir=/usr
257775 root 6260 /usr/bin/python /usr/bin/fail2ban-server
176636 clamav 1086 clamd
146010 2001 27443 /usr/sbin/httpd
122691 apache 30546 /usr/sbin/httpd
121580 apache 27444 /usr/sbin/httpd
121410 apache 6437 /usr/sbin/httpd
121362 apache 6438 /usr/sbin/httpd
121223 apache 6439 /usr/sbin/httpd
121222 apache 6428 /usr/sbin/httpd
in my case its mysqld.