A network control device that has a packet filtering unit for implementing packet filtering based on prescribed information in a header of a received packet, which includes: a position designating unit that designates a prescribed comparison position in a higher level protocol header to the header of the received packet; and an additional determination unit that implements pattern matching filtering by comparing data at the comparison position designated by the position designating unit with preset data.