<p>A network monitor system, a network monitor method, and a network monitor program for easily monitoring a network via which action description information used to describe one action is distributed to a plurality of packets. The network monitor system first acquires a plurality of packets flowing over the network, using a data acquisition unit (32). A data analyzer (33) acquires action description information used to describe one predetermined action from the packets acquired by the data acquisition unit (32). A display information generation unit (34) displays one action over the network on one screen according to on the action description information acquired by the data analyzer (33).</p>
