Cisco and Splunk are both HQ'd in SF. If they were at the airport, it was coming back from Jackson hole or something.
The real trouble with 'maybe they were legit outsiders' is the options expired specifically today, which means you need to know _when the announcement_ is to profit.