There's a thing out on the BugTraq forensics list right now about Knoppix not being sound with regard to forensic investigation.... Unfortunately I can't seem to find it right now..... You might want to look into it......

[Edit]

Search Bugtraq for this thread:-

Re: Re: Write protection devices was: Imaging speed - USB, IDE, laptop

I'm pretty sure this is the one where a CD run Knoppix isn't forensically "sound"

[/Edit]