Network packet payload analysis for intrusion detection