pf nat流量

Kernore

nat on em0 inet from 10.3.12.2 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 64365     Packets: 1501      Bytes: 718804      States: 13    ]
nat on em0 inet from 10.3.12.3 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 64283     Packets: 0         Bytes: 0           States: 0     ]
nat on em0 inet from 10.3.12.4 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 64283     Packets: 0         Bytes: 0           States: 0     ]
nat on em0 inet from 10.3.12.5 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 64283     Packets: 2492      Bytes: 1258019     States: 38    ]
nat on em0 inet from 10.3.12.6 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 63972     Packets: 29903     Bytes: 11337843    States: 13    ]
nat on em0 inet from 10.3.12.7 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 63804     Packets: 0         Bytes: 0           States: 0     ]
nat on em0 inet from 10.3.12.8 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 63804     Packets: 0         Bytes: 0           States: 0     ]

各位大侠，谁能帮我写一个脚本，实现对以上文字按Bytes：大小排序。实现如下的效果：
nat on em0 inet from 10.3.12.6 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 63972     Packets: 29903     Bytes: 11337843    States: 13    ]
nat on em0 inet from 10.3.12.5 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 64283     Packets: 2492      Bytes: 1258019     States: 38    ]
nat on em0 inet from 10.3.12.2 to any -> 8.8.8.8 port 40000:65000
  [ Evaluations: 64365     Packets: 1501      Bytes: 718804      States: 13    ]
………………
………………



非常感谢！！！