in reply to Re^2: 'A' web server takes another "time out" (sar)
in thread 'A' web server takes another "time out"

Well, that's a bust.. too bad.

How about capturing some regular snapshots with vmstat? Maybe

vmstat 60

and a

vmstat -d 60

piped to a file for a few days (or at least a good bit of time before, during and after the event in question). (These commands may require different syntax if you're on FreeBSD, which I can't test with -- we're basically looking for VM stuff and IO/disk stuff... also see iostat) Maybe also throw in a few vmstat -s's for good measure. This would at least provide a little bit more detail around swap in/out and IO.