Gravar-mail: Using CLIPS to detect network intrusions