AFAIC, pf can't do this. You can use ipfw's iplen option:
Matches IP packets whose total length, including header and data,
is in the set len-list, which is either a single value or a list
of values or ranges specified in the same way as ports.