Ok update

32Gb of memory.

Glance shows 20Gb used under Sys Mem

I have a lot of oracle processes, genuine connections it seems, but they have a parent process id of 1...which struck me as odd.

Anyway, I'm still struggling to pinpoint the memory leak.